Devolutions Remote Desktop Manager security vulnerabilities

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.2.21 and prior versions, which stems from incorrect authorization in the Add...

CVE-2024-11670: Incorrect Authorization

Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions...

CVE-2024-11671: Improper Authentication

Improper authentication in SQL data source MFA validation in Devolutions Remote Desktop Manager 2024.3.17 and earlier on Windows allows an authenticated user to bypass the MFA validation via data source switching...

Devolutions Remote Desktop Manager security vulnerabilities

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.3.17 and prior versions, which stems from incorrect authentication in SQL data...

CVE-2024-11672: Incorrect Authorization

Incorrect authorization in the add permission component in Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows an authenticated malicious user to bypass the "Add" permission via the import in vault feature...

CVE-2024-10971

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission...

CVE-2024-10971

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission...

CVE-2024-10971

Devolutions DVLS versions 2024.3.6 and earlier are affected by an improper access control vulnerability in the Password History feature. A malicious authenticated user can exploit faulty permissions to obtain sensitive data . To remediate this, users should update to a version later than 2024.3.7...

CVE-2024-10971

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission...

CVE-2024-10971

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission...

PT-2024-16674 · Devolutions · Devolutions Dvls

Name of the Vulnerable Software and Affected Versions: Devolutions DVLS versions 2024.3.7 and earlier Description: The issue is related to improper access control in the Password History feature, allowing a malicious authenticated user to obtain sensitive data due to faulty permission. The...

CVE-2024-10971: Exposure of Sensitive Information to an Unauthorized Actor

Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious authenticated user to obtain sensitive data via faulty permission...

Devolutions DVLS security vulnerabilities

Devolutions DVLS is a globally popular, full-featured, self-hosted password management platform. A security vulnerability exists in Devolutions DVLS version 2024.3.6 and prior versions that stems from improper access control. An attacker exploiting the vulnerability could gain access to sensitive...

Devolutions Remote Desktop Manager Information Disclosure (DEVO-2024-0014)

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions. Note that Nessus has not tested for thi...

Devolutions Remote Desktop Manager Installed (Windows)

Binary data devolutionsdesktopmanagerwininstalled.nbin...

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...

CVE-2024-7421

The vulnerability CVE-2024-7421 affects Devolutions Remote Desktop Manager (versions up to 2024.2.20.0) on Windows. The issue is an information exposure where credentials used for WinSCP sessions can be retrieved by local attackers who can access system logs, via passwords found in command-line a...

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...

CVE-2024-7421

An information exposure in Devolutions Remote Desktop Manager 2024.2.20.0 and earlier on Windows allows local attackers with access to system logs to obtain session credentials via passwords included in command-line arguments when launching WinSCP sessions...

CVE-2024-6512

Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing intended security restrictions, via the PAM access request approval mechanism...