Improper Access Control in Devolutions Remote Desktop Manager by Devolutions
CVE-2022-3182

7HIGH

Key Information:

Vendor

Devolutions

Status
Remote Desktop Manager
Vendor
CVE Published:
13 September 2022

What is CVE-2022-3182?

An improper access control vulnerability exists in the Duo SMS two-factor authentication mechanism of Devolutions Remote Desktop Manager versions 2022.2.14 and earlier. This issue enables attackers to bypass the application lock, potentially allowing unauthorized access to sensitive functionalities within the application. Organizations using affected versions should review their security configurations and consider updating to ensure enhanced protection against this vulnerability.

Affected Version(s)

Remote Desktop Manager <= 2022.2.14

References

https://devolutions.net/security/advisories/DEVO-2022-0007
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.