CVE-2024-6354: Improper Access Control for Register Interface

Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows an authenticated user to bypass the execute permission via the use of the PAM dashboard...

PT-2024-37560

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2024.2.11 and earlier Description The issue is related to improper access control in the PAM dashboard, allowing an authenticated user to bypass execute permission via the PAM dashboard...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2024-4846

The Devolutions Server (version 2024.1.14.0 and earlier) is susceptible to an authentication bypass within its 2FA feature . An authenticated attacker can exploit this vulnerability by using another browser tab to authenticate as a different user without being prompted for the required two-factor...

PT-2024-33120

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2024.1.14.0 and earlier Description The issue allows an authenticated attacker to bypass the 2-factor authentication 2FA feature and authenticate as another user without being prompted for 2FA, by utilizing another...

CVE-2024-4846: Authentication Bypass by Spoofing

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

Devolutions Server Security Vulnerability

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.1.14.0 and prior versions that stems from an authentication bypass in the 2FA feature...

CVE-2024-6057

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature...

CVE-2024-6057

Devolutions Remote Desktop Manager versions 2024.1.31.0 and earlier are affected by an improper authentication vulnerability in the vault password feature. An attacker who has compromised access to an RDM instance can bypass the vault master password by utilizing the offline mode feature. The sev...

CVE-2024-6057

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature...

CVE-2024-6057

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature...

CVE-2024-6055

The Devolutions Remote Desktop Manager software (version 2024.1.32.0 and earlier) on Windows is vulnerable to the improper removal of sensitive information during the data source export process. This flaw occurs because the application fails to scrub certain data before storage or transfer, allow...

CVE-2024-6055

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration fil...

PT-2024-37349

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2024.1.32.0 and earlier Description: The issue concerns the improper removal of sensitive information in the data source export feature, allowing an attacker who obtains the exported settings to...

CVE-2024-6055: Improper Removal of Sensitive Information Before Storage or Transfer

Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.0 and earlier on Windows allows an attacker that obtains the exported settings to recover powershell credentials configured on the data source via stealing the configuration fil...

CVE-2024-6057: Improper Authentication

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature...

Devolutions Remote Desktop Manager Security Vulnerability

Devolutions Remote Desktop Manager is an application from Devolutions Canada Inc. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2024.1.31.0 and prior versions that stems from improper authentication...