Description
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality.
This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | Remote Desktop Manager | 2025.1.24 – ≤ 2025.1.25, ≤ 2024.3.29 | — |
Advisories 1
- WID-SEC-2025-0646 Devolutions Remote Desktop Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Mar 26, 2025