CVE-2025-2528CWE-285

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration…

Low · published March 26, 2025

CVSS v3.1
3.6
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to

use a configuration different from the one mandated by the system administrators.

This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.6th percentile
Weakness
CWE-285 · Improper Authorization
Published
2025-03-26T17:20Z
EPSS history
Timeline
  • 26 MAR 17:20Z
    Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration…
    cvelistv5