PT-2025-12980 · Devolutions · Devolutions Remote Desktop Manager

CVE-2025-2528 · Publicado 2025-03-26 · Atualizado 2025-07-02

Positive Technologies (AI Summary)

CVSS v3.1

3.6

Baixa

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2024.3.29 and earlier, Devolutions Remote Desktop Manager versions 2025.1.24 through 2025.1.25

Description The issue is related to improper authorization in the application password policy, allowing an authenticated user to use a configuration different from the one mandated by system administrators.

Recommendations For Devolutions Remote Desktop Manager versions 2024.3.29 and earlier, update to a version later than 2024.3.29. For Devolutions Remote Desktop Manager versions 2025.1.24 through 2025.1.25, update to a version later than 2025.1.25.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2025-2528

Produtos afetados

Devolutions Remote Desktop Manager

Referências · 6

• https://t.me/cvedetector/21204 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-2528 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-2528 · Nota de Segurança
• https://t.me/cvenotify/127450 · Publicação no Telegram
• https://devolutions.net/security/advisories/DEVO-2025-0005 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1904954170597396960 · Publicação no Twitter