Design/Logic Flaw

2022-11-0119:15:00

PRIOn knowledge base

www.prio-n.com

database connections

deleted users

unauthorized access

mysql

remote desktop manager 2022.3.7

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data.

This issue affects :
Remote Desktop Manager 2022.3.7 and prior versions.

CPENameOperatorVersion
remote_desktop_managerlt2022.3.8

CPE	Name	Operator	Version
	remote_desktop_manager	lt	2022.3.8

References

devolutions.net/security/advisories/DEVO-2022-0008