Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://devolutions.net/security/advisories/DEVO-2024-0008 | Vendor Advisory |
| https://devolutions.net/security/advisories/DEVO-2024-0008 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Mar 2025, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:* cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:* |
|
| First Time |
Devolutions
Devolutions remote Desktop Manager |
|
| References | () https://devolutions.net/security/advisories/DEVO-2024-0008 - Vendor Advisory |
17 Jun 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-17 13:15
Updated : 2025-03-28 16:23
NVD link : CVE-2024-6057
Mitre link : CVE-2024-6057
JSON object : View
Products Affected
devolutions
- remote_desktop_manager
CWE
No CWE.