CVE-2022-3780: High severity Devolutions Remote Desktop Manager vulnerability
Published Nov 1, 2022
·Updated
Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data.
This issue affects : Remote Desktop Manager 2022.3.7 and prior versions.
Affected Software
1 affected component
Devolutions Remote Desktop Manager<2022.3.8
Event History
Nov 1, 2022
CVE Published
via MITRE·06:22 PM
Data Sourced
via MITRE·06:22 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-3780.
2
What is the severity of CVE-2022-3780?
The severity of CVE-2022-3780 is high with a score of 7.5.
3
Which versions of Remote Desktop Manager are affected by CVE-2022-3780?
Remote Desktop Manager 2022.3.7 and prior versions are affected by CVE-2022-3780.
4
What is the impact of CVE-2022-3780?
CVE-2022-3780 allows deleted users to access unauthorized data.
5
Is there a fix available for CVE-2022-3780?
Update to Remote Desktop Manager version 2022.3.8 or later to fix CVE-2022-3780.