Portail
Forum
Devolutions Force
Hub Business
Hub Personal
Devolutions Send
Devolutions Academy
RDM
Workspace
Launcher
Sécurité et conformité
DEVO-2022-0004
Résumé
Credentials in My Account Settings are accessible to other users when stored in the database.
Produits affectés
Remote Desktop Manager 2022.1.6 and earlier
Journal des modifications
Initial Publication - 2022-05-02
Sévérité
Medium
Produit
Remote Desktop Manager
Version corrigée
2022.1.8
Credentials stored in My Account Settings are accessible to other users
Description
Credentials stored in My Account Settings are stored in the datasource by default, which make them accessible to other users. An option was added in Remote Desktop Manager to save account settings locally.
Mesures correctives et solutions de contournement
Starting with Remote Desktop Manager 2022.1.8, an option is available in My Account Settings to set the save location to "Local". Account settings will then be saved locally on the computer.
Sévérité
Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produits affectés
Remote Desktop Manager 2022.1.6 and earlier
CVE(s)
CVE-2022-2221
