Skip to content
OpenAdvisories
Low · 3.1 CVE-2023-2282

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenti…

Published Apr 25, 2023 · Updated Feb 4, 2025 · Assigned by DEVOLUTIONS

Description

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector.

Affected products

VendorProductAffectedFixed
Devolutions Remote Desktop Manager ≤ 2023.1.22 —

References