CVE-2025-2528

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*

History

02 Jul 2025, 17:32

Type Values Removed Values Added
First Time Devolutions
Devolutions remote Desktop Manager
References () https://devolutions.net/security/advisories/DEVO-2025-0005/ - () https://devolutions.net/security/advisories/DEVO-2025-0005/ - Vendor Advisory
CPE cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:team:windows:*:*
cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:free:windows:*:*

26 Mar 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-26 18:15

Updated : 2025-07-02 17:32


NVD link : CVE-2025-2528

Mitre link : CVE-2025-2528


JSON object : View

Products Affected

devolutions

  • remote_desktop_manager
CWE

No CWE.