remote_desktop_manager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/remote_desktop_manager/ Thu, 23 Feb 2023 14:12:11 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png remote_desktop_manager Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/remote_desktop_manager/ 32 32 CVE-2021-42098 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-42098/ Thu, 23 Feb 2023 14:12:11 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-42098/ An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

The post CVE-2021-42098 appeared first on CVE Vulnerability.

]]> An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

The post CVE-2021-42098 appeared first on CVE Vulnerability.

]]> CVE-2021-28047 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-28047/ Thu, 23 Feb 2023 14:08:42 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-28047/ Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields.

The post CVE-2021-28047 appeared first on CVE Vulnerability.

]]> Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields.

The post CVE-2021-28047 appeared first on CVE Vulnerability.

]]> CVE-2021-23922 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-23922/ Thu, 23 Feb 2023 14:07:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-23922/ An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews.

The post CVE-2021-23922 appeared first on CVE Vulnerability.

]]> An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews.

The post CVE-2021-23922 appeared first on CVE Vulnerability.

]]> CVE-2022-4287 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4287/ Thu, 23 Feb 2023 05:21:04 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4287/ Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application.

The post CVE-2022-4287 appeared first on CVE Vulnerability.

]]> Authentication bypass in local application lock feature in Devolutions Remote Desktop Manager 2022.3.26 and earlier on Windows allows malicious user to access the application.

The post CVE-2022-4287 appeared first on CVE Vulnerability.

]]> CVE-2022-3780 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3780/ Thu, 23 Feb 2023 05:20:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3780/ Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions.

The post CVE-2022-3780 appeared first on CVE Vulnerability.

]]> Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions.

The post CVE-2022-3780 appeared first on CVE Vulnerability.

]]> CVE-2022-3781 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3781/ Thu, 23 Feb 2023 05:20:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3781/ Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and […]

The post CVE-2022-3781 appeared first on CVE Vulnerability.

]]> Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data. This issue affects : Remote Desktop Manager 2022.2.26 and prior versions. Devolutions Server 2022.3.1 and prior versions.

The post CVE-2022-3781 appeared first on CVE Vulnerability.

]]> CVE-2022-3641 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3641/ Thu, 23 Feb 2023 05:19:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3641/ Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

The post CVE-2022-3641 appeared first on CVE Vulnerability.

]]> Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

The post CVE-2022-3641 appeared first on CVE Vulnerability.

]]> CVE-2022-33995 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-33995/ Thu, 23 Feb 2023 05:19:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-33995/ A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location.

The post CVE-2022-33995 appeared first on CVE Vulnerability.

]]> A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location.

The post CVE-2022-33995 appeared first on CVE Vulnerability.

]]> CVE-2022-3182 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-3182/ Thu, 23 Feb 2023 05:18:57 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-3182/ Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.

The post CVE-2022-3182 appeared first on CVE Vulnerability.

]]> Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.

The post CVE-2022-3182 appeared first on CVE Vulnerability.

]]> CVE-2022-26964 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-26964/ Thu, 23 Feb 2023 05:17:58 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-26964/ Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

The post CVE-2022-26964 appeared first on CVE Vulnerability.

]]> Weak password derivation for export in Devolutions Remote Desktop Manager before 2022.1 allows information disclosure via a password brute-force attack. An error caused base64 to be decoded.

The post CVE-2022-26964 appeared first on CVE Vulnerability.

]]>