1658 matches found
CVE-2025-1635
The Devolutions Remote Desktop Manager on Windows (versions 2024.3.29 and earlier ) is affected by a security vulnerability (CVE-2025-1635 ) resulting from faulty business logic in the hub data source export feature. This flaw allows an authenticated user to inadvertently include their authentica...
CVE-2025-2277
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...
CVE-2025-2277
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...
CVE-2025-2277
Devolutions Server version 2024.3.13 and earlier is affected by a vulnerability in the web-based SSH authentication component . The root cause is a missing password masking mechanism, which allows users to inadvertently leak their SSH passwords. To mitigate this risk, it is recommended to disable...
PT-2025-11173
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.13 and earlier Description: The issue is related to improper access control in the web extension restriction feature, allowing an authenticated user to bypass the browser extension restriction...
PT-2025-11170
Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.3.29 and earlier Description: The issue concerns the exposure of sensitive information in the My Personal Credentials password history component. This allows an authenticated user to...
Devolutions Server security vulnerabilities
Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.13 and prior versions, which stems from improper access control in the Temporary...
Devolutions Remote Desktop Manager security vulnerabilities
Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.29 and earlier, which stems from a business logic error in the hub data sourc...
Devolutions Server security vulnerabilities
Devolutions Server is an application from Devolutions Canada Inc. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.13 and earlier, which stems from a missing password mask in the web-based SSH...
CVE-2025-2280: Improper Access Control
Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an authenticated user to bypass the browser extension restriction feature...
CVE-2025-2278: Improper Access Control
Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...
CVE-2025-2277: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...
CVE-2025-1636: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faul...
CVE-2025-1635: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows a user exporting a hub data source to include his authenticated session in the export due to faulty business logic...
PT-2025-11171
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.13 and earlier Description: The issue is related to the exposure of passwords in the web-based SSH authentication component due to missing password masking, allowing a user to unintentionally leak their SSH...
PT-2025-11172
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.13 and earlier Description: The issue is related to improper access control in temporary access requests and checkout requests endpoints, allowing an authenticated user to access information about these...
PT-2025-11169
Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.3.29 and earlier Description: The issue concerns the exposure of sensitive information in the hub data source export feature due to faulty business logic. This allows a user exporting a hub dat...
Devolutions Server security vulnerabilities
Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.13 and prior versions that stems from improper access control of the Web Extension...
