Lucene search

K
nvd[email protected]NVD:CVE-2022-4287
HistoryDec 21, 2022 - 5:15 p.m.

CVE-2022-4287

2022-12-2117:15:10
web.nvd.nist.gov
cve-2022-4287
devolutions
windows
authentication bypass
application lock

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.7%

Authentication bypass in local application lock feature in Devolutions Remote Desktop ManagerΒ  2022.3.26 and earlier on Windows allows malicious user to access the application.

Affected configurations

NVD
Node
devolutionsremote_desktop_managerRange<2022.3.27

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

39.7%

Related for NVD:CVE-2022-4287