High · 7.2 CVE-2024-6354 EUVD-2024-47463GHSA-gw84-qf63-55gw

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated use…

Published Jun 26, 2024 · Updated Mar 13, 2025 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Remote Desktop Manager

Description

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Remote Desktop Manager	≤ 2024.2.11	—

References

https://devolutions.net/security/advisories/DEVO-2024-0010