CVE-2022-3781CWE-311

Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and…

Medium · published November 1, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data.

This issue affects :

Remote Desktop Manager 2022.2.26 and prior versions.

Devolutions Server 2022.3.1 and prior versions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00480 · 40.4th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2022-11-01T18:28Z
EPSS history
Timeline
  • 01 NOV 18:28Z
    Dashlane password and Keepass Server password in My Account Settings  are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and…
    cvelistv5