medium5.4
CVE-2025-2562
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without g…
Impact
Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a stored password without generating a corresponding log event, via the use of the autotyping functionality. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | before 2024.3.31.0 from 2025.1.24.0 before 2025.1.26.0 |