CVE-2022-1342CWE-549

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data

published June 15, 2022

CVSS
—
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Weakness
CWE-549 · Missing Password Field Masking
Published
2022-06-15T16:09Z
EPSS history
Timeline
  • 15 JUN 16:09Z
    A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data
    cvelistv5