Vendor
Devolutions
199 known vulnerabilities.
Products
199 results · Feed
-
Medium 5.4
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated…
-
Low 3.6
Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authen…
-
Medium 5.4
Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An auth…
-
High 8.1
Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an aut…
-
Medium 6.5
Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 an…
-
Medium 6.5
Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop M…
-
Medium 6.5
Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and…
-
High 7.5
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a use…
-
High 7.1
Incorrect authorization in PAM vaults in Devolutions Server 2024.3.12 and earlier allows an authenticated user to bypas…
-
Medium 5.4
Improper password reset in PAM Module in Devolutions Server 2024.3.10.0 and earlier allows an authenticated user to reu…
-
High 8.8
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker t…
-
High 8.1
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and…
-
Medium 4.3
Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authe…
-
High 8.1
Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.…
-
Medium 5.0
Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users…
-
Medium 6.5
Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticate…
-
Medium 5.1
Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
-
Medium 5.4
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earl…
-
Medium 5.4
Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier o…
-
Medium 4.3
Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on …
-
Medium 4.3
Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious aut…
-
Medium 5.5
An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers…
-
Medium 6.5
Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows au…
-
High 7.4
Exposure of Sensitive Information in edge browser session proxy feature in Devolutions Remote Desktop Manager 2024.2.14…
-
High 7.2
Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows …
-
Medium 6.3
Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker…
-
Critical 9.8
Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier all…
-
Medium 4.7
Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32…
-
Medium 6.5
Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenti…
-
Medium 4.3
Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and ear…
-
Low 3.6
Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker wi…
-
Critical 9.8
Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated …
-
High 8.8
Improper access control in PAM JIT elevation in Devolutions Server 2024.1.6 and earlier allows an attacker with access …
-
Medium 5.9
Improper cleanup in temporary file handling component in Devolutions Remote Desktop Manager 2024.1.12 and earlier on Wi…
-
Medium 6.3
Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated use…
-
High 7.6
Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allo…
-
Low 3.9
Improper access control in the notification feature in Devolutions Server 2023.3.14.0 and earlier allows a low privileg…
-
Medium 5.5
Improper session management in the identity provider authentication flow in Devolutions Server 2023.3.14.0 and earlier …
-
Medium 4.3
Denial of service in PAM password rotation during the check-in process in Devolutions Server 2023.3.14.0 allows an auth…
-
Medium 5.4
Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and …