VULNERABILITY INTELLIGENCE

CVE-2025-2528

CVSS score3.6 LOW
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authenticated user to use a configuration different from the one mandated by the system administrators. This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Weakness classification

  • security@devolutions.net: CWE-285

Primary references