Description
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Remote Desktop Manager | ≤ 2024.2.21.0 | — |