Medium WID-SEC-2025-0646 4 CVEs

Devolutions Remote Desktop Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Mar 26, 2025 · Updated Mar 26, 2025 · de-DE

Vendor: Devolutions Product: Remote Desktop Manager Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Devolutions Remote Desktop Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Devolutions Remote Desktop Manager ist eine zentrale Plattform zur Verwaltung von Remoteverbindungen, Passwörtern und Anmeldeinformationen.

Vulnerabilities 4

Medium 6.8

CVE-2025-2600

Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticat…

Devolutions Remote Desktop Manager

Mar 26, 2025
Medium 5.4

CVE-2025-2499

Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An auth…

Devolutions Remote Desktop Manager

Mar 26, 2025
Medium 5.4

CVE-2025-2562

Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated…

Devolutions Remote Desktop Manager

Mar 26, 2025
Low 3.6

CVE-2025-2528

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authen…

Devolutions Remote Desktop Manager

Mar 26, 2025

Revision history

2025-03-26 #1
Initiale Fassung

References

Devolutions Security Advisory vom 2025-03-26
https://devolutions.net/security/advisories/DEVO-2025-0005