devolutions remote desktop manager meets nist 800 53

Published: J1:15:08 PM -0400Īn incomplete permission check on entries in Devolutions Remote Desktop Manager before 2021.2.16 allows attackers to bypass permissions via batch custom PowerShell. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. Published: J11:15:09 AM -0400Ī lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. Published: J3:15:08 PM -0400Ī path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary location. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.

Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users.

This issue affects: Devolutions Remote Desktop Manager version 2022.2.14 and prior versions.

Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackers to bypass the application lock.

Devolutions remote desktop manager meets nist 800 53