2 lines
2.2 KiB
JSON
2 lines
2.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"Remote Desktop Manager","vendor":"Devolutions","versions":[{"lessThanOrEqual":"2022.2.14","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@devolutions.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"5D025500-73B7-4EC1-BC5F-35F5BFE7D1E9","versionEndExcluding":"2022.2.15","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock. This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions."},{"lang":"es","value":"Una vulnerabilidad de Control de Acceso Inapropiado en el doble factor Duo SMS de Devolutions Remote Desktop Manager 2022.2.14 y anteriores, permite a atacantes omitir un bloqueo de la aplicación. Este problema afecta a: Devolutions Remote Desktop Manager versiones 2022.2.14 y versiones anteriores"}],"id":"CVE-2022-3182","lastModified":"2026-06-17T04:59:01.140","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-09-13T20:15:09.887","references":[{"source":"security@devolutions.net","tags":["Vendor Advisory"],"url":"https://devolutions.net/security/advisories/DEVO-2022-0007"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://devolutions.net/security/advisories/DEVO-2022-0007"}],"sourceIdentifier":"security@devolutions.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"security@devolutions.net","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|