low3.6
CVE-2025-2528
Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration diff…
Impact
Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | before 2024.3.31.0 from 2025.1.24.0 before 2025.1.26.0 |