PT-2021-15608

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: An issue was discovered in Devolutions Server. There is broken access control on Password List entry elements. Recommendations: For versions prior to 2020.3, update to version 2020.3 or...

CVE-2021-23923: Improper Authentication

An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users...

CVE-2021-28047: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields...

Devolutions Server cross-site scripting vulnerabilities

Devolutions Server is a local management solution that helps organizations control access to privileged accounts and business user passwords. A cross-site scripting vulnerability exists in Devolutions Server versions prior to 2020.3 in entries of type "Document", which can be exploited by an...

PT-2021-15609

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2020.2.12 Description: A cross-site scripting XSS issue was found in webviews, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to...

Devolutions Server security vulnerabilities

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server before 2020.3, which stems from a breach of access control on the password list entry element...

CVE-2021-23922: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting XSS vulnerability in webviews...

Devolutions Server Authorization Issue Vulnerability

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. An authorization issue vulnerability exists in Devolutions Server versions prior to 2020.3 that stems from an authentication outage for Windows domain users. ...

PT-2021-17728

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2021.1 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields in Administrative Reports, potentially leading to Cross-Site...