CVE-2022-2221

6.5 mediumEPSS 1.3%

Medium (6.5) in devolutions remote desktop manager. EPSS 1.3% chance of exploitation in the next 30 days.

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-200
Published: 2022-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

devolutions:remote_desktop_manager

References

https://devolutions.net/security/advisories/DEVO-2022-0004
https://devolutions.net/security/advisories/DEVO-2022-0004

Check your stack JSON