Description
Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to
use a configuration different from the one mandated by the system administrators.
This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Remote Desktop Manager | 2025.1.24 – ≤ 2025.1.25, ≤ 2024.3.29 | — |
Advisories 1
- WID-SEC-2025-0646 Devolutions Remote Desktop Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Mar 26, 2025