PT-2022-21957 · Devolutions · Devolutions Remote Desktop Manager

Published 2022-06-21 · Updated 2022-06-28 · CVE-2022-33995

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions prior to 2022.2

Description A path traversal issue in entry attachments allows attackers to create or overwrite files in an arbitrary location.

Recommendations For versions prior to 2022.2, update to version 2022.2 or later to resolve the issue. As a temporary workaround, consider restricting access to entry attachments until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-33995

Affected Products

Devolutions Remote Desktop Manager

References · 6

• https://osv.dev/vulnerability/CVE-2022-33995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33995 · Security Note
• https://t.me/cvenotify/32326 · Telegram Post
• https://devolutions.net · Note
• https://t.me/cibsecurity/44908 · Telegram Post
• https://t.me/cvenotify/31936 · Telegram Post