Approved changes feed: RSS · Atom

cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*

part: a version: * update: *

VendorDevolutions (7032325e-1090-5501-8038-d00cf17c6e3c)
ProductRemote Desktop Manager (e12a972b-fe5a-5881-a0c7-92cc2cc23f39)
Edition*
Language*
Software editionteam
Target softwarewindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5334 vulnerable 2026-06-08 07:35:24.670952 Details available
Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Desktop Manager allows an authenticated user to gain unauthorized access to private personal information. Under specific circumstances, entries may be unintentionally moved from user vaults to shared vaults when edited by their owners, making them accessible to other users. This issue affects the following versions : * Remote Desktop Manager Windows 2025.1.34.0 and earlier * Remote Desktop Manager macOS 2025.1.16.3 and earlier * Remote Desktop Manager Android 2025.1.3.3 and earlier * Remote Desktop Manager iOS 2025.1.6.0 and earlier
Published: 2025-05-29T14:47:25.817Z
Updated: 2025-06-10T18:24:21.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2600 vulnerable 2026-06-08 07:16:57.820546 Details available
Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use the ELEVATED_PASSWORD variable even though not allowed by the "Allow password in variable policy". This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Published: 2025-03-26T17:37:39.621Z
Updated: 2025-08-26T17:43:23.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2562 vulnerable 2026-06-08 07:16:57.446354 Details available
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Published: 2025-03-26T17:24:37.280Z
Updated: 2025-03-26T18:18:25.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2528 vulnerable 2026-06-08 07:16:57.321318 Details available
Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Published: 2025-03-26T17:20:00.521Z
Updated: 2025-03-26T18:55:36.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2499 vulnerable 2026-06-08 07:16:57.135758 Details available
Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An authenticated user can exploit this flaw to bypass certain permission restrictions—specifically View Password, Edit Asset, and Edit Permissions by performing specific actions. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Published: 2025-03-26T17:14:59.457Z
Updated: 2025-03-26T19:31:19.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1636 vulnerable 2026-06-08 07:08:37.424389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1635 vulnerable 2026-06-08 07:08:37.423858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1193 vulnerable 2026-06-08 07:06:37.134960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6492 vulnerable 2026-06-08 06:58:19.589417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6354 vulnerable 2026-06-08 06:58:18.740201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6057 vulnerable 2026-06-08 06:58:17.592576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6055 vulnerable 2026-06-08 06:58:17.590268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3545 vulnerable 2026-06-08 06:41:53.560630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2403 vulnerable 2026-06-08 06:33:31.029264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12149 vulnerable 2026-06-08 06:23:51.352642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11672 vulnerable 2026-06-08 06:23:50.179265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11671 vulnerable 2026-06-08 06:23:50.178668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11670 vulnerable 2026-06-08 06:23:50.178206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.