Unscored CVE-2021-42098 EUVD-2021-29084GHSA-2f87-25r8-5pw3

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via…

Published Oct 18, 2021 · Updated Aug 4, 2024 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Remote Desktop Manager

Description

An incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Remote Desktop Manager	2021.2.14 and earlier. Fixed in 2021.2.16.	—

References

https://devolutions.net
https://devolutions.net/security/advisories/DEVO-2021-0006