We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-2528



Description

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Reserved 2025-03-19 | Published 2025-03-26 | Updated 2025-03-26 | Assigner DEVOLUTIONS

Problem types

CWE-285: Improper Authorization

Product status

Default status
unaffected

2025.1.24
affected

Any version
affected

References

devolutions.net/security/advisories/DEVO-2025-0005/

cve.org (CVE-2025-2528)

nvd.nist.gov (CVE-2025-2528)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-2528

Support options

Helpdesk Chat, Email, Knowledgebase