Vendor
Devolutions
199 known vulnerabilities.
Products
105 results · Clear filters · Feed
-
Medium 5.4
Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier o…
-
Medium 4.3
Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on …
-
Medium 4.3
Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious aut…
-
Medium 5.5
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers…
-
Medium 6.5
Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows au…
-
Medium 6.3
Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker…
-
Medium 4.7
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32…
-
Medium 6.5
Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenti…
-
Medium 4.3
Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and ear…
-
Medium 5.9
Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Wi…
-
Medium 6.3
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated use…
-
Medium 5.5
Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier …
-
Medium 4.3
Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an auth…
-
Medium 5.4
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and …
-
Medium 4.9
Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers…
-
Medium 6.1
Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows an…
-
Medium 4.3
Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticate…
-
Medium 4.3
No access control for the OTP key on OTP entries
No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.
-
Medium 6.5
Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to can…
-
Medium 6.5
Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior versi…
-
Medium 6.5
Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9 …
-
Medium 6.5
Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1…
-
Medium 6.5
Improper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an authenticated user to ac…
-
Medium 6.5
Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data.
-
Medium 6.5
Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions …