CVE-2022-3182

2022-09-1319:27:28

CWE-284

DEVOLUTIONS

www.cve.org

access control

devolutions remote desktop manager

vulnerability

EPSS

Percentile

12.6%

JSON

Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.

CNA Affected

[
  {
    "product": "Remote Desktop Manager",
    "vendor": "Devolutions",
    "versions": [
      {
        "lessThanOrEqual": "2022.2.14",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

devolutions.net/security/advisories/DEVO-2022-0007

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2022-3182