Portal 
Forum 
Devolutions Force 
Devolutions Hub Business 
Devolutions Hub Personal 
Devolutions Send 
Devolutions Academy 
RDM 
Workspace 
Launcher 
Sicherheit & Regelkonformität
Wir halten die höchsten Standards ein, um Ihre Daten zu schützen und Vertrauen zu gewährleisten.
DEVO-2025-0001
Remote Desktop Managers on all platforms had vulnerabilities in their certificate validation logic.
Specifically, on the Windows platform, the certificate validation didn't validate the host.
On the other platforms, the certificate validation was missing and would accept any certificate without prompting the users.
Betroffene Produkte
Änderungsprotokoll
10/02/2025 - Initial publication
8.5 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Improper host validation in the certificate validation in Remote Desktop Manager Windows
Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attackby presenting a certificate for a different host.
Betroffene Produkte
CVE(s)
CVE-2025-1193
Behebungen und Workarounds
Upgrade to Remote Desktop Manager Windows 2024.3.20.0 or higher
8.6 High - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Missing certificate validation in Devolutions Remote Desktop Manager
Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack.
Betroffene Produkte
CVE(s)
CVE-2024-11621
Behebungen und Workarounds
Upgrade Remote Desktop Manager macOS to 2024.3.10.3 or higherUpgrade Remote Desktop Manager Linux to 2024.3.2.9 or higherUpgrade Remote Desktop Manager Android to 2024.3.4.2 or higherUpgrade Remote Desktop Manager iOS to 2024.3.4.0 or higherUpgrade Remote Desktop Manager Powershell to 2024.3.7.0 or higher
