CVE-2022-1342: Devolutions Remote Desktop Manager

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions.

Affected products

  • Devolutions Remote Desktop Manager: up to and including 2022.1.24

Published 2022-06-15. Last modified 2026-06-17.