{
  "cveId": "CVE-2022-3781",
  "url": "https://patchblox.com/security/cve/CVE-2022-3781",
  "summary": "CVE-2022-3781 is fixed in Remote Desktop Manager on 1 platform by Remote Desktop Manager 2022.2.29.0 (version 2022.2.29.0), released October 20, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Remote Desktop Manager: Missing Encryption of Sensitive Data",
  "description": "Dashlane password and Keepass Server password in My Account Settings\u00A0 are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and prior versions and Devolutions Server 2022.3.1 and prior versions which allows database users to read the data.\n\nThis issue affects : \nRemote Desktop Manager 2022.2.26 and prior versions.\n\nDevolutions Server 2022.3.1 and prior versions.",
  "published": "2022-11-01T19:15:11Z",
  "severity": "",
  "cvss": 6.5,
  "cwe": "CWE-311: Missing Encryption of Sensitive Data",
  "epss": 0.00533,
  "epssPercentile": 0.45234,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2022-3781",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Remote Desktop Manager",
      "fixedVersion": "2022.2.29.0",
      "fix": "Remote Desktop Manager 2022.2.29.0",
      "url": "https://patchblox.com/security/fix/windows-app/devolutions.remotedesktopmanager-2022.2.29.0",
      "released": "2022-10-20T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}