Security & compliance

Upholding the highest standards to protect your data and ensure trust.

DEVO-2022-0004

Credentials in My Account Settings are accessible to other users when stored in the database.

Affected Products

Remote Desktop Manager
2022.1.6 and earlier

Change Log

Initial Publication - 2022-05-02

Medium - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Credentials stored in My Account Settings are accessible to other users

Credentials stored in My Account Settings are stored in the datasource by default, which make them accessible to other users. An option was added in Remote Desktop Manager to save account settings locally.

Affected Products

CVE(s)

CVE-2022-2221

Remediation and Workarounds

Starting with Remote Desktop Manager 2022.1.8, an option is available in My Account Settings to set the save location to "Local". Account settings will then be saved locally on the computer.

Devolutions Logo

Helping organizations control the IT chaos by providing highly-secure password, remote connection and privileged access management solutions.

DEVOLUTIONS

Legal & privacy | infos@devolutions.net

All rights reserved © 2025 Devolutions