CVE Feed

    Dashboard / CVE / CVE-2022-3780

    CVE-2022-3780

    Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data. This issue affects : Remote Desktop Manager 2022.3.7 and prior versions.

    Published:Nov 1, 2022
    Last Modified:May 5, 2025
    EPS:Nov 1, 2022
    EPSS Score:0.00236
    CVSS Score:7.5

    Affected Products

    Vendor
    Devolutions
    Product
    Remote Desktop Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2026-78417 (CVSS 4.3) — Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 202…
    CVE-2026-13372 (CVSS 7.2) — Incorrect link resolution by display name in the custom PowerShell VPN editor in Devolutions Remote Desktop Ma…
    CVE-2026-12162 (CVSS 5.5) — Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 …
    CVE-2026-12161 (CVSS 8.8) — Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to cr…
    CVE-2026-2590 (CVSS 9.8) — Improper enforcement of the Disable password saving in vaults setting in the connection entry component in D…
    CVE-2026-0747 (CVSS 3.3) — Exposure of sensitive information in the TeamViewer entry dashboard component in Devolutions Remote Desktop Ma…
    CVE-2025-13683 (CVSS 6.5) — Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This i…
    CVE-2025-5334 (CVSS 7.5) — Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions …
    CVE-2025-2600 (CVSS 6.8) — Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an au…
    CVE-2025-2562 (CVSS 5.4) — Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an auth…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High