CVE-2025-2528 — Devolutions / Remote Desktop Manager

CVE-2025-2528

Devolutions / Remote Desktop Manager PUBLISHED

Description (CNA)

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Affected (CNA)

Vendor / product	Versions
Devolutions / Remote Desktop Manager	affected 2025.1.24 through 2025.1.25; affected 0 through 2024.3.29

CWE

CWE-285

References

https://devolutions.net/security/advisories/DEVO-2025-0005/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.