CVE-2022-3780 - Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data

Back Back to CVE browser

HIGH

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data

Published Nov 1, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.59%

Description

Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access unauthorized data.

This issue affects : Remote Desktop Manager 2022.3.7 and prior versions.

Affected products

Vendor Devolutions Product Remote Desktop Manager Default
unaffected
Affected
- ≥ 0, ≤ 2022.3.7

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Devolutions	Remote Desktop Manager	unaffected	Affected ≥ 0, ≤ 2022.3.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://devolutions.net/security/advisories/DEVO-2022-0008
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43130
Advisory

Link	Providers	Tags
https://devolutions.net/security/advisories/DEVO-2022-0008		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43130		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner DEVOLUTIONS

Published Nov 1, 2022

Updated May 5, 2025

Reserved Oct 31, 2022

Link CVE-2022-3780

CISA Vulnrichment

Updated May 5, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3780

Red Hat

No data

ENISA EUVD

Assigner DEVOLUTIONS

Published Nov 1, 2022

Updated May 5, 2025

Link EUVD-2022-43130

GitHub

No data