Versionshinweise | Devolutions Server

2026.1.19.0

· May 21, 2026

Sicherheit 15 Verbesserungen 3 Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Sicherheit

15

CVE-2026-5171 Core - Fixed an issue where users without Activity Logs permission could still retrieve entry logs through the API
CVE-2026-7325 PAM - Fixed an LDAP coercion issue that could force DVLS to authenticate against a malicious LDAP server
CVE-2026-8477 Core - Fixed a security issue where sealed entries could be accessed through the partial sensitive-data endpoint without triggering unseal notifications
CVE-2026-9047 Core - Fixed an issue where adding an additional MFA factor could remove an existing MFA key
CVE-2026-9223 Core - Fixed a missing permission check that could allow users to create a new vault when importing an .rdx file referencing a non-existent vault
CVE-2026-9224 Core - Fixed an issue where Active Directory accounts could modify their own profile data through the API despite UI restrictions
CVE-2026-9245 Core - Fixed an open redirect vulnerability during external OAuth sign-in failures or cancellations
CVE-2026-9246 Core - Fixed an issue where handbook content and attachment metadata from sealed entries could be accessed without following the unseal workflow
CVE-2026-9247 Core - Fixed an issue where sealed credentials could be unsealed in another DVLS instance without notifying administrators, and improved handling of linked sealed credentials after import
CVE-2026-9248 Core - Fixed an issue where duplicating a connection could copy handbooks and attachments from entries the user could not access
CVE-2026-9249 Core - Fixed a password change bypass that allowed users to change passwords without providing the previous password
CVE-2026-9251 Core - Fixed an issue where non-admin users could bypass the Pending Approval flow by changing an entry's status
Core - Added audit logging for Send Copy actions so administrators can track who shared entries and with whom
Core - Hardened the authorization cache key to prevent any future cache-poisoning regression (follow-up to CVE-2026-1768)
Core - Improved authentication security to prevent external-provider sessions from bypassing password authentication under a different login method

Verbesserungen

3

Core - Improved Active Directory user creation performance
PAM - Added an option to skip TLS validation for the Windows Provider
Web - Added Command key support for multi-selection in the web interface, allowing Mac users to extend selections with Cmd-click

Fehlerbehebungen

5

Core - Fixed a NullReferenceException in the notification processing service that could leave notifications stuck in an unprocessed state
Core - Fixed an issue where Linked (External) credentials were not saved correctly on SSH entries linked to an SSH Key
Core - Fixed attachments being lost when moving an entry to another vault
Core - Fixed folder duplication so sub-entries are duplicated along with the parent folder
Web - Fixed a TypeError when opening the Advanced Search dialog as a user without a User Vault

2026.1.16.0

· May 5, 2026

Sicherheit 1 Fehlerbehebungen 15

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Sicherheit

1

CVE-2026-5146 Core - Closed a security gap allowing notification actions without authentication

Fehlerbehebungen

15

Core - Fixed a configuration error causing app settings to fail loading
Core - Fixed admins receiving expiration alerts for other users' vault items
Core - Fixed an issue where deleting a user could remove all users from the list
Core - Fixed incorrect backup failure alerts and cleanup issues on Linux/Docker
Core - Fixed unreliable installation of IIS ASP.NET Core Module on new Windows Server setups
PAM - Fixed visibility selector closing too early when creating a new vault
Web - Fixed "Disable MFA" dialog not closing after confirmation
Web - Fixed default authentication method being ignored in Domain mode
Web - Fixed empty notification banners appearing across admin pages
Web - Fixed error dialogs showing blank content instead of messages
Web - Fixed incorrect warning when saving entries with compromised passwords
Web - Fixed login page defaulting to Domain authentication when set to "None"
Web - Fixed reveal/copy actions targeting the wrong field after sorting entries
Web - Fixed Security Dashboard crash when navigating after resolving ignored issues
Web - Multiple UI improvements and fixes

2026.1.15.0

· April 28, 2026

Sicherheit 1 Verbesserungen 2 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Sicherheit

1

CVE-2026-6706 Core - Added missing authorization check to prevent unauthorized access to handbook pages

Verbesserungen

2

Core - Renamed Read-Only and Restricted user types to Legacy and removed Read-Only from default user templates
Web - Updated third-party dependencies to address security issues, including a reported lodash vulnerability

Fehlerbehebungen

7

Core - Allowed CyberArk entries to be saved without a username when using OIDC authentication
Core - Fixed the Buy a License flow so licenses can be purchased and retrieved properly
Core - Prevented permission set changes from being lost when saving after navigation
Core - Resolved issue preventing administrators from removing user subscriptions
Web - Ensured Reset Password prompt appears above Emergency Login prompt
Web - Fixed Hide/Reveal behavior on sensitive fields after table sorting
Web - Hid unsupported System Dashboard options in Customize Layout dialog for restricted vaults

2026.1.14.0

· April 15, 2026

Verbesserungen 3 Fehlerbehebungen 14

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Verbesserungen

3

Core - Added option for admins to reset a user's dashboard layout
Core - Improved LDAP group handling to support users with over 1,000 groups
Web - Session names now show the connection name instead of the host name for better consistency

Fehlerbehebungen

14

Core - Fixed error preventing MFA settings from being saved in user administration
Core - Fixed false nightly "user modified" alerts during directory sync (Entra ID, AD, Okta, PingOne)
Core - Fixed Linux issue where access URL didn't update after setting a custom domain
Core - Fixed login failure after upgrade caused by improperly migrated security key data
Core - Fixed login issue for contractor users when Devolutions authentication was disabled
Core - Fixed MFA policy bypass allowing users to delete their own MFA methods
Core - Fixed unintended default vault access granted to imported domain users
PAM - Improved loading speed of Azure AD groups and user auto-creation
RestAPI - Fixed sort order parameter not applying correctly in vault endpoint
RestAPI - Fixed vault filter to correctly return Infrastructure vaults
Web - Fixed authentication filter not resetting properly in Users list
Web - Fixed error when clicking info icon in Entra ID configuration
Web - Fixed Linux issue causing repeated dashboard widget duplication
Web - Multiple UI fixes and improvements

2026.1.12.0

· April 1, 2026

Sicherheit 6 Verbesserungen 1 Fehlerbehebungen 16

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Sicherheit

6

CVE-2026-4828 Core - Fixed a security issue where MFA check could be bypassed when Emergency Code authentication was disabled
CVE-2026-4829 Core - Fixed an issue where OAuth session reuse could allow user impersonation, including administrators
CVE-2026-4924 Core - Fixed a security issue where MFA could be bypassed using an alternate authentication cookie
CVE-2026-4925 Core - Fixed an issue allowing users to remove their own MFA despite enforced restrictions
CVE-2026-4927 Core - Fixed an issue where users with management permissions could access other users' MFA secrets
CVE-2026-4989 Core - Fixed an issue where the gateway health check could be exploited for server-side request forgery (SSRF)

Verbesserungen

1

Core - Added dashboard layout reset capability allowing administrators to reset a user's corrupted or misconfigured dashboard layout back to defaults

Fehlerbehebungen

16

Core - Fixed a regression where Microsoft User synchronization failed with an error reading 'UserCleanupDelta'
Core - Fixed an issue where approving temporary access requests did not work when only groups were set as approvers
Core - Fixed an issue where the contractor welcome email redirect did not work if the user was already logged in
Core - Fixed KeePass XML import incorrectly creating Legacy Website entries instead of the correct entry type
Core - Fixed Public API path query parameter filtering to work correctly with encoded URLs and nested paths
Core - Fixed the scheduler service crashing when custom log retention policy configuration contained invalid data
Gateway - Fixed a server-side request forgery vulnerability in the gateway health check route
Gateway - Fixed an issue where new vaults could not be selected when changing the member filter in a gateway farm
Gateway - Fixed session recording not working when the session does not connect through a gateway
Gateway - Fixed the gateway going offline when a connection to a session fails due to a Virtual Gateway rule or other reason
Web - Fixed a regression where the "All vault" button in the search stopped working
Web - Fixed an issue where Domain/AD users could not be added by browsing and selecting them
Web - Fixed normal users receiving an "Unable to save" error in the customize dashboard layout when a default dashboard exists
Web - Fixed the credit card edit component missing a reveal sensitive data button
Web - Fixed the entry security analyzer where the "Pwned" password filter was not working
Web - Fixed the TOTP window display being broken

2026.1.11.0

· March 19, 2026

Verbesserungen 4 Fehlerbehebungen 31

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Verbesserungen

4

Core - Added "Show Release News" preference to control release notification visibility
Core - Free License users now appear disabled with a clear visual indicator to explain login restriction
Core - Renamed "System Dashboard" to "Administration Dashboard" for clearer terminology
Gateway - Added update notification to System Dashboard

Fehlerbehebungen

31

Core - Fixed "Allow API Key" setting not persisting after save
Core - Fixed "Apply Least Permissions" failing when permissions were preconfigured
Core - Fixed "Unable to save" error when users customize dashboards with a default dashboard set
Core - Fixed clipboard restrictions not applying in RDP web sessions
Core - Fixed contractor users unable to launch RDP sessions via permalink
Core - Fixed error when running Last Usage Logs report for regular users
Core - Fixed inability to update password generator templates
Core - Fixed inability to view inherited OTP codes from root
Core - Fixed intermittent dashboard widget reordering not applying
Core - Fixed missing activity logs for User Group restore and delete actions
Core - Fixed new users not being enabled by default when created
Core - Fixed performance issues with Conditional Access Policies enabled
Core - Fixed session termination redirecting incorrectly in Active Sessions view
Core - Fixed user edits unintentionally removing assigned licenses
Core - Fixed vault permissions appearing disabled for non-admin users
Core - Resolved SQL collation issues during database and web backups
Gateway - Fixed advanced domain settings not saving
Gateway - Fixed drain mode and scan option issues in Gateway farms
Gateway - Fixed inability to terminate sessions using credential injection
Gateway - Fixed session launch failures with inherited Gateway Rule Sets
PAM - Fixed duplicated parent folders during account import
PAM - Fixed incorrect error title on recurrent SSH key scan failure
PAM - Fixed missing out-of-sync icon for SSH key accounts
PAM - Fixed module admins unable to see external vaults during import
PAM - Fixed PAM logs and rotation reports stuck loading on refresh
PAM - Fixed SSH checkout approval error with "Yes, unless it's JIT" option
PAM - Fixed unauthorized users appearing in checkout approver list
PAM - Restored custom fields visibility in connection overview
Web - Fixed "Access Denied" error for non-admin session launches with credential injection
Web - Fixed PAM checkout redirect causing 404 error
Web - Fixed Remote PowerShell entries not launching in web client

2026.1.7.0

· March 10, 2026

Verbesserungen 6 Fehlerbehebungen 19

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version

Verbesserungen

6

Core - Added an option to hide the domain login method when domain SSO is enabled
Core - Dynamic IP Lists are now generated by the server so they work correctly in the web interface and all clients
Core - Expired entry lists and scheduled reports now display the full folder path for better context
Core - Fixed path filtering behavior in the Public API, including support for empty paths returning root entries
Gateway - Gateway-managed sessions from user vaults now correctly display the user's identity
Gateway - In RDM, the Gateway section is only available for vaults with Gateway access

Fehlerbehebungen

19

Core - Fixed a crash when editing unsupported entry types
Core - Fixed a failure when moving entries between vaults with folders sharing the same name in RDM
Core - Fixed activity logs showing identical active time and duration values when switching tabs
Core - Fixed an incorrect message indicating DVLS would revert to the free version after deleting a license
Core - Fixed errors triggered by the "Buy now" button in the licenses section
Core - Fixed missing activity log events when deleting or restoring user groups
PAM - Fixed an empty approver list in the checkout approval dialog for certain SSH account configurations
PAM - Fixed an issue where the default Gateway was not saved when enabling Gateway usage on a PAM provider
PAM - Fixed domain PAM provider connection tests incorrectly falling back to the parent domain
PAM - Fixed missing password reset after failed JIT elevation for non-provisioning accounts
PAM - Fixed OTP prompt appearing for brokering-only PAM accounts
PAM - Fixed vault owners missing from checkout request approver lists
PAM - Fixed visual issues in the propagation template interface
Web - Fixed a blank tree view that appeared when editing entries near the bottom of the scroll position
Web - Fixed a Content Security Policy issue preventing RDP connections in the web client
Web - Fixed an error when saving user vault entries for accounts without a user vault
Web - Fixed live session recordings showing an empty dialog in the web client
Web - Fixed SSH session recordings not opening in the web interface
Web - Fixed the "Reveal password" button failing when creating a Password List entry

2026.1.6.0

· March 3, 2026

Sicherheit 2 Funktionen 16 Verbesserungen 37 Fehlerbehebungen 27

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2026.1 is required for this DVLS version This version requires the .NET 10 Hosting Bundle

Sicherheit

2

CVE-2026-3204 Core - Fixed an issue where the error message page displayed a tamperable error message
CVE-2026-4434 Fix Improper certificate validation in WinRM connections

Funktionen

16

Core - Added custom vault dashboard widgets with drag-and-drop reordering
Core - Added Just-in-Time (JiT) access for SSH (sudo) sessions
Core - Added new Contractors account type with expiration date support
Core - Added support for SSH key certificates in the web
Core - Added vault priority sorting
Core - Admins can create preset dashboards for users
Core - Licenses can now be purchased directly within DVLS
Core - Multiple improvement and fixes with the synchronizer where they was mismatch with RDM
Core - Users can now request a trial directly from the application
Core - Users can now request sudo access when requesting checkout
Gateway - Added RDP credential injection for more secure session launches
Gateway - Added traffic event logs to privileged session monitoring
PAM - Added MongoDB provider support
PAM - Added PowerShell session recording
PAM - Added the ability to automatically terminate active sessions when a PAM account is checked in
PAM - Added UI to assign and manage risk levels for roles

Verbesserungen

37

Core - Added "Prompt on connection" support for linked VPN/SSH/Gateway sessions, matching the behavior already available for linked credentials
Core - Added launch links on connections for quick session sharing
Core - Added missing fields in the "Advanced" tab for SFTP connections
Core - Added OTP support for linked external vaults
Core - Added support for editing Delinea Secret Server entries directly within DVLS
Core - Admins can set the default behavior for automatically checking in PAM accounts when closing entries
Core - Corrected inaccurate syslog messages that reported successful logins incorrectly
Core - Deprecated read-only and restricted permission types
Core - Entra ID now enforces secret expiration with banner and email warnings
Core - Entry security settings now use inherited values by default
Core - Error reports now include connection type details
Core - Improve Entry Security Analyzer report to include all relevant fields, matching the information already available in RDM
Core - Improved license management — disabling a user now automatically removes their assigned licenses
Core - Improved performance for access requests in RDM
Core - Linked vaults can now point to entries in the same folder
Core - Public API now supports CRUD operations for folders and vaults
Core - Renamed Log Retention Policies to Database Retention Policies and added retention options for connection history, remote sessions, and traffic events
Core - Simplified license assignment in data sources
Core - Synchronizers now support scheduling by hour
Core - Tags can now be used with inheritance rules
Core - The public API now supports full CRUD operations for vaults, allowing administrators to create, read, update, and delete vaults programmatically
Core - Users can now configure multiple MFA methods at once
Gateway - Renamed "Virtual Gateway" to "Gateway ruleset"
Gateway - Sessions can now be recorded on a different gateway than the launch gateway
Gateway - The Gateway Diagnostic window now displays whether Devolutions Agent is installed and running
Gateway - The gateway list now automatically refreshes after an update request completes
PAM - Added "Create folder" option when importing PAM accounts
PAM - Added "Skip TLS validation" option in PowerShell provider settings
PAM - Added "Workspace" as a supported application option in the PAM usage policies admin section
PAM - Improved error message when no provider is specified on a PAM account
PAM - Renamed "Scan" to "Account Discovery"
PAM - Users without a PAM license can now perform basic PAM operations, such as checking out PAM credentials, without requiring a full PAM license Assignment
Web - Added a warning in the web interface when an OTP account name contains a colon (":"), consistent with existing behavior in RDM
Web - Administrators can now set permissions on entry types that are not technically supported on the web
Web - Users can now customize the "Add connection" favorites section
Web Client - Multiple UI improvements
Web Client - Updated dark theme

Fehlerbehebungen

27

Core - Fixed a regression where it was no longer possible to set a user as an administrator
Core - Fixed a scheduler timeout error that could cause scheduled tasks to fail intermittently
Core - Fixed an error occurring when too many vaults were present
Core - Fixed an error that occurred when editing account login information on a deprecated entry type
Core - Fixed an issue where exported logs from the DVLS Console were being cropped and truncated
Core - Fixed an issue where forbidden passwords could still be saved in a password list entry
Core - Fixed an issue where new Active Directory user accounts were not appearing in DVLS, preventing the auto-create on first login feature from Working correctly
Core - Fixed an issue where OAuth token rejections were incorrectly returning HTTP 200 with an empty response instead of a proper error code
Core - Fixed duplicate vault cards appearing on the dashboard
Core - Fixed notification emails being sent in English for users configured in French
Core - Fixed repeated migration attempts after SQL migration and server restart
Gateway - Fixed a issue where clicking "Close" from the session kebab menu did not always close the session on the first attempt
Gateway - Fixed a missing configuration option in the Web UI for allowing additional hosts through Devolutions Gateway
Gateway - Fixed an inconsistency in how Gateway tunnels were configured and displayed between RDM and the Web UI
Gateway - Fixed an issue where enabling vault-level security on a gateway prevented it from being used in gateway farms and PAM providers
Gateway - Fixed an issue where virtual gateways were not automatically deleted when their associated physical gateway was removed, leaving orphaned entries that no longer functioned
PAM - Fixed "Nobody" account appearing when "Ignore system users" was enabled
PAM - Fixed a security issue where non-administrator users could view other users' PAM actions in the Privileged Access logs
PAM - Fixed account discovery failure caused by circular security group membership
PAM - Fixed an error that occurred when attempting to add a folder to a newly created PAM vault during the import process
PAM - Fixed an issue where Domain Quick Scan was no longer working
PAM - Fixed an issue where groups located in the Builtin organizational unit were not visible when selecting groups for JIT (Just-In-Time) elevation
PAM - Fixed Local Windows scan failure when credentials were linked
PAM - Fixed SSH scan failure when sudo was configured with NOPASSWORD
Web - Fixed inconsistent rendering of secure notes set as Markdown across different platforms
Web - Fixed the Notification Subscriptions filter not working correctly
Web - Multiple UI fixes

2025.3.22.0

· May 21, 2026

Sicherheit 13

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

13

CVE-2026-5171 Core - Fixed an issue where users without Activity Logs permission could still retrieve entry logs through the API
CVE-2026-7325 PAM - Fixed an LDAP coercion issue that could force DVLS to authenticate against a malicious LDAP server
CVE-2026-8477 Core - Fixed a security issue where sealed entries could be accessed through the partial sensitive-data endpoint without triggering unseal notifications
CVE-2026-9224 Core - Fixed an issue where Active Directory accounts could modify their own profile data through the API despite UI restrictions
CVE-2026-9245 Core - Fixed an open redirect vulnerability during external OAuth sign-in failures or cancellations
CVE-2026-9246 Core - Fixed an issue where handbook content and attachment metadata from sealed entries could be accessed without following the unseal workflow
CVE-2026-9247 Core - Fixed an issue where sealed credentials could be unsealed in another DVLS instance without notifying administrators, and improved handling of linked sealed credentials after import
CVE-2026-9248 Core - Fixed an issue where duplicating a connection could copy handbooks and attachments from entries the user could not access
CVE-2026-9249 Core - Fixed a password change bypass that allowed users to change passwords without providing the previous password
CVE-2026-9251 Core - Fixed an issue where non-admin users could bypass the Pending Approval flow by changing an entry's status
Core - Added audit logging for Send Copy actions so administrators can track who shared entries and with whom
Core - Hardened the authorization cache key to prevent any future cache-poisoning regression (follow-up to CVE-2026-1768)
Core - Improved authentication security to prevent external-provider sessions from bypassing password authentication under a different login method

2025.3.20.0

· May 5, 2026

Sicherheit 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

1

CVE-2026-5146 Core - Closed a security gap allowing notification actions without authentication

2025.3.19.0

· April 29, 2026

Sicherheit 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

1

CVE-2026-6706 Core - Added missing authorization check to prevent unauthorized access to handbook pages

2025.3.18.0

· April 1, 2026

Sicherheit 5 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

5

PAM - Fixed incorrect authorization on PAM endpoints that allowed low-privilege users to access PAM provider and checkout policy information
CVE-2026-4828 Core - Fixed a security issue where MFA check could be bypassed when Emergency Code authentication was disabled
CVE-2026-4924 Core - Fixed a security issue where MFA could be bypassed using an alternate authentication cookie
CVE-2026-4925 Core - Fixed an issue allowing users to remove their own MFA despite enforced restrictions
CVE-2026-4989 Core - Fixed an issue where the gateway health check could be exploited for server-side request forgery (SSRF)

Fehlerbehebungen

7

Core - Fixed performance issues with Conditional Access Policies enabled
Core - Resolved SQL collation issues during database and web backups
Core - Restored access to sensitive User Vault information by correcting permission handling
PAM - Fixed OTP prompt appearing for brokering-only PAM accounts
Web - Fixed an error when saving user vault entries for accounts without a user vault
Web - Fixed the credit card edit component missing a reveal sensitive data button
Web - Restored ability to send Secure Messages with attachments

2025.3.16.0

· March 3, 2026

Sicherheit 2 Verbesserungen 1 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

2

CVE-2026-3130 PAM - Prevented deletion of checked-out PAM accounts
CVE-2026-3224 Core - Fixed a critical security issue that allowed attackers to bypass Entra ID (Azure AD) authentication using a forged identity token

Verbesserungen

1

Gateway - Gateway list now refreshes automatically after updates

Fehlerbehebungen

7

Core - Fixed error preventing infrastructure vault access
Core - Replaced unclear error when saving to a non-existent personal vault with an access denied message
Gateway - Fixed gateways with custom security not selectable in farms and PAM providers
PAM - Fixed domain connection test using wrong domain
PAM - Fixed incorrect UPN suffix for JIT-provisioned AD accounts
PAM - Fixed password reset failures when associated Gateway was missing
Web - Fixed inconsistent Markdown rendering

2025.3.15.0

· February 9, 2026

Sicherheit 3 Fehlerbehebungen 11

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

3

CVE-2026-1768 Core - Fixed a permission cache poisoning vulnerability that could allow unauthorized access
CVE-2026-3131 Core - Fixed sensitive credential exposure through API endpoints for users with View-only permissions
CVE-2026-3221 Core - Enhanced database security by encrypting previously cleartext personal credentials storage

Fehlerbehebungen

11

Core - Fixed crash in Reports > Entry Diagnostic page caused
Core - Fixed credential prompt appearing unexpectedly when sessions inherit credentials from parent folders
Core - Fixed issue where MFA reset option was not working properly for user accounts
Core - Fixed issue where some user vault entries were permanently lost when deleting a user and transferring their vault
Gateway - Fixed PAM sessions remaining open in Gateway when PAM operations fail, preventing session accumulation
Linux - Fixed error when configuring Active Directory authentication on Linux servers
PAM - Fixed password reset not being triggered after importing Entra ID accounts
Web - Fixed character encoding issues in Active Directory Console displaying special characters incorrectly
Web - Fixed infinite resize loop causing flickering or grey screen when switching from Dynamic Resizing to Actual Size mode
Web - Fixed tag autocomplete not filling in the rest of the tag name when selecting from dropdown suggestions
Web - Fixed tree view crash

2025.3.14.0

· January 15, 2026

Sicherheit 2 Funktionen 1 Verbesserungen 2 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

2

CVE-2026-0610 Core - Fixed SQL injection vulnerability in remote sessions API
CVE-2026-1007 Gateway - Fixed virtual gateway deny IP and DNS rules being bypassed using linked host entries in user vaults

Funktionen

1

Core - Added ability to request a trial directly from the application

Verbesserungen

2

Core - Added connection type information to error reports for better troubleshooting
Core - Updated the CA pinning bundle used for Duo API communication to prevent API connectivity issues More information

Fehlerbehebungen

6

Core - Fixed Syslog timestamp format being invalid in certain locales such as Finland
Core - Fixed vault filter not being applied correctly in PAM recent activities scheduled reports
Gateway - Fixed variables not being resolved in privileged session monitoring
PAM - Fixed password being updated in database even when scheduled reset fails on the target system
PAM - Fixed Windows local account scans failing on non-English operating systems
Web - Fixed sessions failing to launch from web interface when user-specific settings are disabled globally

2025.3.12.0

· December 18, 2025

Sicherheit 1 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

1

Core - Fixed user and role restore API endpoints being accessible without proper UserManager or Admin permissions

Verbesserungen

1

Core - Enabled password history for Secret entry types

Fehlerbehebungen

6

Core - Fixed notifications being sent for deleted entries that had expired
Core - Fixed OTP code viewing being logged as "Password viewed" instead of "OTP code viewed" in the web interface
PAM - Fixed builtin organizational units not appearing in PAM account discovery scans
PAM - Fixed LDAPS heartbeat and password rotation failures for accounts in Active Directory Protected Users Group
Web - Fixed vaults failing to load after performing a force refresh on the entry templates page
Web - Fixed website becoming completely unresponsive when typing the expiration date for certificate entries

2025.3.11.0

· December 4, 2025

Funktionen 1 Verbesserungen 1 Fehlerbehebungen 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Funktionen

1

[BC] Core - DVLS Free now limited to a single user but includes Remote Desktop Manager access

Verbesserungen

1

PAM - Added create folder button when importing PAM accounts for easier organization

Fehlerbehebungen

2

PAM - Fixed password rotation not respecting configured password policies
Web - Fixed browser RDP sessions disconnecting after 5-10 seconds for non-administrator users

2025.3.10.0

· November 27, 2025

Sicherheit 4 Verbesserungen 5 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

4

CVE-2025-13757 Core - Core - Fixed SQL injection vulnerability in the last usage logs API endpoint Privileged Sessions Monitoring
CVE-2025-13757 Core - Fixed SQL injection vulnerability in the last usage logs API endpoint
CVE-2025-13758 Core - Fixed security issue where sensitive credentials were exposed in API responses for certain connection types (SMB, HyperV, WebDav, and others)
CVE-2025-13765 Core - Fixed security issue where SMTP configuration with passwords could be viewed through the API without administrator permissions

Verbesserungen

5

Core - Added requirement for Entra ID secret expiration date during configuration to prevent unexpected login failures
Core - Improved Entra ID authentication by displaying warning banners and sending email alerts to administrators when secrets approach expiration
PAM - Added ability to create folders directly during PAM account import process
PAM - Improved PAM administrator access to automatically grant access to all PAM vaults without manual assignment
PAM - Reduced notification frequency for PAM health checks by sending alerts only once when accounts become out of sync

Fehlerbehebungen

7

Core - Fixed database permission errors for scheduler service on notification group subscriber tables
Core - Fixed database permission errors for scheduler service when inserting telemetry events
Core - Fixed duplicate key violations that occurred during server startup when users had both administrator and vault owner roles
Core - Fixed erroneous mismatch log messages during SSO authentication from RDM
Core - Fixed issue where configured additional access URIs were no longer accessible
Core - Fixed login failures and server crashes when new users attempted to authenticate
Web - Fixed issue where PAM account approval requests in the messages UI would freeze the interface and require page refresh

2025.3.8.0

· November 18, 2025

Fehlerbehebungen 14

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Fehlerbehebungen

14

Core - Fixed an issue where Windows authentication combined with 2FA would fail to work properly
Core - Fixed infrastructure vault accounts not being deleted when switching console authentication to Windows authentication
Core - Fixed LDAP synchronization sending unnecessary email notifications when user emails are modified during provider refresh
Core - Fixed LDAPS authentication failing when using domain\username format in credentials while LDAP worked correctly
Core - Fixed refresh token failures when using Entra ID proxy app authentication with RDM
PAM - Fixed account names being incorrectly overwritten by usernames during domain heartbeat operations
PAM - Fixed an error that occurred when accessing PAM vaults with active checkouts by other users
PAM - Fixed an error when checking out credentials for SSH sessions using "My Privileged Account" with Local User (SSH) PAM accounts
PAM - Fixed an error when importing SSH Key accounts that prevented successful account import
PAM - Fixed PAM vaults created through scan import not being properly identified as PAM vaults
PAM - Fixed password reset failures on imported local accounts when the provider domain uses a linked account
PAM - Fixed SSH scan results not properly marking already imported PAM accounts as imported
Web - Fixed dynamic resolution setting being ignored when opening RDP sessions in the web interface
Web - Fixed RD Gateway parameters being reset to default values after saving RDP entry configurations

2025.3.7.0

· November 13, 2025

Verbesserungen 2 Fehlerbehebungen 9

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Verbesserungen

2

Core - Added folder column to the expired entries report for better organization and tracking
Core - Improved application secret generation by excluding problematic special characters ($ ` ' ") that caused issues with PowerShell scripts

Fehlerbehebungen

9

Core - Fixed access denied error when creating conditional access policies for non-administrator users restricted to specific subnets
Core - Fixed crash when non-admin users managed temporary access requests through secure messages in RDM
Core - Fixed Jira ticketing integration by updating to API v3 to support the latest Atlassian API changes
Core - Fixed LDAPS handling and port mapping for Active Directory entries to correctly use the isLDAPS property and default to port
Core - Fixed notification subscription emails for backup jobs showing "user was not found" when the scheduler triggered the backup
Core - Prevented adding semicolons when editing folder names to avoid duplicate shortcut issues
Gateway - Fixed issue where terminated ARD sessions remained visible in the Sessions left menu as if still active
PAM - Fixed missing "Elevate as" option when granting checkout for temporary JIT accounts
Web - Fixed AD Sync OU container checkbox synchronization issue where checking the option in RDM didn't reflect as checked in DVLS Web

2025.3.6.0

· November 6, 2025

Sicherheit 2 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

2

CVE-2025-12485 Core - Fixed authentication bypass vulnerability where "Configure 2FA by user later" could be exploited to access other user accounts
CVE-2025-12808 Core - Fixed password list custom values being visible to users with view-only permissions

Verbesserungen

1

PAM - Auto-selected PAM content type when creating a PAM vault to streamline the workflow

Fehlerbehebungen

6

Core - Fixed issue where custom date/time format was not displayed in user preferences when forced by admin
Core - Fixed null reference error occurring in Administration logs and Diagnostics reports
PAM - Fixed AnyIdentity provider not allowing linked credentials when using custom credential type
Web - Fixed SSH private keys not being fetched when using "Prompt on Connection" with linked credentials
Web - Fixed TypeError preventing editing of older scheduled reports
Web - UI fixes

2025.3.5.0

· October 28, 2025

Wichtige Änderungen 1 Verbesserungen 3 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Wichtige Änderungen

1

REST API - Custom field output now returns an array with all associated data

Verbesserungen

3

Core - Added support for linked vault credentials pointing to their own folder entry
Core - Improved session recording permission label to clarify it controls viewing recordings rather than the recording feature itself
Gateway - Changed gateway token generation logging from information to debug level to reduce log verbosity

Fehlerbehebungen

7

Core - Fixed issue preventing editing of vault settings and 'Add in root' permissions dropdown values
Core - Fixed issue preventing selection of users, groups, or apps in entry permissions when they weren't allowed on the vault
Core - Fixed issue preventing vault owners from restoring deleted entries
Core - Fixed move to vault functionality that was no longer working
PAM - Fixed heartbeat check not being performed after resetting PAM account passwords via PowerShell
PAM - Fixed JIT elevation failing after switching username format
PAM - Fixed pagination issue preventing navigation through SSH key scan results

2025.3.4.0

· October 22, 2025

Funktionen 1 Verbesserungen 1 Fehlerbehebungen 13

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Funktionen

1

Core - Added option to require a passphrase when using Devolutions Send, enhancing security for shared sensitive information

Verbesserungen

1

Core - Improved OTP display by color-coding based on remaining time (blue for 20+ seconds, yellow for 11-20 seconds, red for 1-10 seconds)

Fehlerbehebungen

13

Core - Fixed an error that occurred when no entry types were available for creation
Core - Fixed an error when browsing domain containers in domain authentication settings
Core - Fixed an issue where "Add in Root" and "Vault Settings" permissions displayed as "Default (Custom)" instead of the correct resolved value
Core - Fixed an issue where Pleasant Password Server entry configurations were incorrectly saved to My Account settings instead of the entry itself
Core - Fixed an issue where the tilde (~) character was not recognized as a special character in password template validation
Core - Fixed an issue where users appeared twice when filtering by group in the Import Users from Domain feature
Core - Fixed sorting and moving conditional access policies on page 2 and beyond
PAM - Fixed an issue where account names were incorrectly overwritten by usernames during domain heartbeat operations
PAM - Fixed an issue where deleted PAM entries were not accessible in Remote Desktop Manager
PAM - Fixed an issue where editing Infrastructure Vault accounts incorrectly prompted for a PAM license
PAM - Fixed an issue where gateway settings were ignored when using local SSH providers
Web - Fixed an issue where user-specific display resolution settings were not applied in the Web RDP client
Web - Removed unnecessary tabs (Permissions, Temporary Access, Time Based Usage, Checkout Mode) from User Vault settings in the web interface

2025.3.3.0

· October 15, 2025

Sicherheit 1 Verbesserungen 1 Fehlerbehebungen 8

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

1

CVE-2025-11619 Core - Fixed an issue where the Gateway domain in the TLS certificate was not validated

Verbesserungen

1

Core - Improved the clarity of virtual access denied log entries

Fehlerbehebungen

8

Core - Fixed an issue preventing Add/Edit of MFA conditional policies when the result was set to MFA required or MFA skipped
Core - Fixed an issue where AD users were locked out after a single failed login attempt
Core - Fixed an issue where DUO automatic login actions were no longer triggered
Core - Fixed an issue where recordings could no longer be viewed in the web interface
Core - Fixed an issue where the syslog server status incorrectly showed as Down on the System dashboard
Core - Fixed an issue where updating the DVLS server instance could duplicate certain PAM folders
Core - Fixed broken clipboard integration in the SSH web client
PAM - Fixed an error when applying a custom date filter in the Recent Activity report

2025.3.2.0

· October 7, 2025

Sicherheit 1 Funktionen 14 Verbesserungen 14 Fehlerbehebungen 10

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.3 is required for this DVLS version

Sicherheit

1

CVE-2025-11958 Core - Fixed a security vulnerability that could cause the Security Dashboard to become unavailable

Funktionen

14

Core - Added a "Linked (External Vault)" option for entries, allowing sessions to reference credentials stored in an external vault
Core - Added an onboarding experience for new installations to simplify initial setup
Core - Added an option to enable biometric lock for the Workspace app
Core - Added support for a custom, editable dictionary for passphrase generation
Core - Added the ability for users to create an API key for their account
Core - Added webhook support for specific trigger events
Core - Require re-authentication before allowing users to change MFA
Core - Users can now configure their own MFA
Gateway - Added a new setting to enable RDP reconnection
Gateway - Added network access rules for virtual gateways, with scoping by IP address, IP range, subnet, and DNS name
Gateway - Added virtual gateways, enabling different permissions on the same physical gateway
PAM - Added "Account Life Policies," consolidating PAM options and enabling inheritance at all levels (entry, folder, root)
PAM - Added conditional policies based on JIT elevation status
Web - Added support to disconnect WBEX sessions on close and when idle

Verbesserungen

14

Core - Changed default of password policy and password validation to be handled as "Inherited" - Make sure your inheritance structure is appropriate
Core - Added password expiration to password policies
Core - Added support for attachments when sending via Devo Send in DVLS
Core - Editing an entry now triggers the checkout option
Core - Improved image management with the ability to merge duplicate images
Core - Improved LDAP domain controller fallback for faster failover
Core - Improved the Entry Properties menu to align with RDM, making options easier to find
Core - Removed the ability to grant permissions on entries in vaults the user cannot access
Core - Renamed "Cleanup Log" to "Log Retention Policies"
Core - Renamed "Password Templates" to "Password Policies"
Core - Temporary access on a folder now extends to entries created in that folder after the request
PAM - Added support for editing accounts directly in RDM
PAM - Added tier detection during account discovery for domain and Entra ID accounts
PAM - Local Account scan results now exclude provider service accounts

Fehlerbehebungen

10

Core - Fixed an issue where renaming a folder with a backslash () would break the folder
Core - Fixed an issue where the password generator would not open when editing an entry
Core - Reduced the number of emails sent when Syslog is down
PAM - Fixed an error that occurred when adding JIT elevation to a PAM checkout
PAM - Fixed an error when importing computers from an AD scan
PAM - Fixed an issue where editing Account Life Policies could result in an infinite loading state
Web - Fixed an issue where SSH sessions returned "The authentication sequence has failed" when launched in the web client with a linked-to-vault private key
Web - Fixed an issue where web sessions could not be opened with a PAM credential
Web - Restored the top menu button when opening ARD web sessions
Web - Various user interface fixes and improvements

2025.2.22.0

· January 14, 2026

Verbesserungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Verbesserungen

1

Core - Update DUO MFA integration

2025.2.21.0

· November 27, 2025

Sicherheit 2 Fehlerbehebungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

2

CVE-2025-13757 Core - Fixed SQL injection vulnerability in the last usage logs API endpoint
CVE-2025-13758 Core - Fixed security issue where sensitive credentials were exposed in API responses for certain connection types (SMB, HyperV, WebDav, and others)

Fehlerbehebungen

1

Core - Fixed erroneous mismatch log messages during SSO authentication from RDM

2025.2.19.0

· November 19, 2025

Fehlerbehebungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Fehlerbehebungen

1

Core - Fixed an issue where Windows authentication combined with 2FA would fail to work properly

2025.2.17.0

· November 7, 2025

Sicherheit 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

2

Core - Fixed authentication bypass vulnerability where "Configure 2FA by user later" could be exploited to access other user accounts
Core - Fixed password list custom values being visible to users with view-only permissions

2025.2.15.0

· October 16, 2025

Sicherheit 1 Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

1

CVE-2025-11619 Core - Fixed an issue where the Gateway domain in the TLS certificate was not validated

Fehlerbehebungen

3

Core - Fixed an issue preventing Add/Edit of MFA conditional policies when the result was set to MFA required or MFA skipped
Core - Fixed an issue where gateway settings were ignored for local SSH providers
Core - Fixed an issue where the syslog server status incorrectly showed as Down on the System dashboard

2025.2.14.0

· October 1, 2025

Sicherheit 2 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

2

CVE-2025-11957 Core - Fixed an issue where unauthorized users could approve temporary access requests
CVE-2025-11957 Core - Fixed an issue where users could self-approve temporary access requests

Fehlerbehebungen

4

Core - Fixed an error when importing computers from an AD scan
Core - Reduced email notifications when Syslog is down or the instance goes offline
Core - Upgraded the MailKit library to resolve email sending issues
PAM - Fixed a missing "Password template" field in the PAM account password generator

2025.2.12.0

· September 12, 2025

Sicherheit 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

1

Core - Password History now logs when a user views or clears it

Fehlerbehebungen

6

Core - Fixed a potential data corruption issue in user vaults during migration from an SQL data source
Core - Fixed an issue where email hyperlinks did not redirect correctly after login
Core - Fixed an issue where Syslog was never marked as up, remaining down even after recovery
Core - Fixed an issue where the initial Password History date was incorrect when adding an entry through the web client
Gateway - Cleanup now ignores session recordings associated with nonexistent gateways
Gateway - Fixed an issue where the cleanup task skipped some recordings

2025.2.10.0

· August 20, 2025

Fehlerbehebungen 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Fehlerbehebungen

2

Core - Fixed an issue where duplicating a folder inadvertently duplicated entries in the original folder
PAM - Fixed an issue where the "Reset Password" and "Check Synchronization" actions were not available for AnyIdentity accounts

2025.2.9.0

· August 14, 2025

Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Verbesserungen

1

PAM - Add gateway support for Windows user provider

Fehlerbehebungen

4

Core - External authentication provider token removed prematurely in a load balanced environment
Core - Fix entries not synced using VMware synchronizer with an RDP template
Core - Fixed Gateway cleanup task skipping some recordings
Web - Fixed some dates localization

2025.2.8.0

· August 7, 2025

Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Verbesserungen

1

Core - Add clipboard for web terminal

Fehlerbehebungen

4

Core - Fix cannot add certificate entry in RDMW
Core - Fix public API: get-entries exception for certain entry types
Core - Fix Syslog error: missing debug information when unable to connect to the server
PAM - Fix resolving the default values on the checkout policy when updating the policy of the connection

2025.2.7.0

· July 29, 2025

Sicherheit 1 Verbesserungen 3 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

1

CVE-2025-8312 PAM - Resolved an issue where the automatic check-in task could unexpectedly stop

Verbesserungen

3

Core - Added safeguards to prevent lockouts caused by conditional access policies
Web - Enhanced error messaging in the SSH web terminal for better clarity and troubleshooting
Web - Introduced a visual indicator to highlight licenses with no users assigned

Fehlerbehebungen

6

Core - The Version field is now correctly included in the Login History report export
PAM - Addressed an issue where PowerShell tasks generated by PAM would remain open after a crash
PAM - Corrected an issue where SSH scans returned no results
PAM - Fixed a bug preventing PAM administrators from browsing OUs in domain accounts
PAM - Fixed the heartbeat check running every minute regardless of the configured interval
PAM - Resolved a problem where the checkout policy would lose its default values

2025.2.5.0

· July 17, 2025

Sicherheit 1 Verbesserungen 3 Fehlerbehebungen 8

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

1

CVE-2025-8353 PAM - Fixed an issue where JIT groups were not updated when approving a checkout scheduled for a future date

Verbesserungen

3

Core - Added a "Hide Existing" option when importing Entra ID users and user groups
Core - Added biometric configuration options for the Workspace app
Core - Limited "Syslog server unreachable" email notifications to a single message

Fehlerbehebungen

8

CVE-2025-6741 Core - Fixed an issue where connection permissions could be bypassed through secure messages
Core - Fixed an error experienced by some users when using syslog
Core - Fixed an error when approving temporary access request
Core - Fixed an issue where RDP session recordings to remote hosts disconnected after a few seconds
Core - Fixed an issue where the Gateway was selected by default in SSH Provider settings and could not be deselected
Core - Restored functionality for Gateway Tunnel entries that were not working
PAM - Fixed an error where PAM approvers could not approve checkout requests
Web - Several UI fixes

2025.2.4.0

· June 23, 2025

Sicherheit 1 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

1

CVE-2025-6523 Core - Increased the length of emergency codes to fix a vulnerability and prevent brute-force attacks

Verbesserungen

1

REST API - Added support for the username in SSH key

Fehlerbehebungen

6

Core - Fixed an issue where the 180-day filter was not working
PAM - Fixed an issue where a PAM provider failed to connect through its configured gateway
PAM - Fixed an issue where some PAM providers could be lost during an upgrade
Web - Fixed an issue where launching a session through the web client failed when the gateway was set to Inherited
Web - Fixed an issue where SSH sessions could not connect through the web client when linked to an SSH private key
Web - Several UI fixes

2025.2.3.0

· June 16, 2025

Verbesserungen 3 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Verbesserungen

3

Core - Improved notification emails to display timestamps in UTC
PAM - Added checkout policies for entries and folders
PAM - Added OTP configuration for folders

Fehlerbehebungen

7

Core - Fixed an error when launching a connection through the web client
Core - Fixed an issue where drag-and-drop functionality
PAM - Fixed an issue where approving a checkout scheduled for a future date failed
PAM - Fixed an issue where the checkout duration was not applied correctly
PAM - Fixed an issue where the PAM Domain Provider could not be configured with a Domain Controller
Rest API - Fixed an error with the connection tag in the REST API
UI Fixes

2025.2.2.0

· June 4, 2025

Sicherheit 2 Wichtige Änderungen 1 Funktionen 8 Verbesserungen 17 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.2 is required for this DVLS version

Sicherheit

2

CVE-2025-0691 Core - Fixed an issue where "Edit permissions" could be bypassed. The permission is now validated server side
CVE-2025-3768 Core - Fixed an issue where Tor exit node was updated even on error

Wichtige Änderungen

1

Core - Our EULA and TOS are now combined into a single master agreement and include our new solution packages

Funktionen

8

Core - Added a "Pending Approval" workflow for entry creation
Core - Added a Privileged Session Monitoring tool and a new "Privileged Sessions Monitoring" permission to grant users access to this feature
Core - Added Hyper-V dashboard in web interface
Core - Added new credential mode "use linked host credentials"
Core - Added new permissions for editing VPN/Tunel/Gateway and editing Session Recording configuration
Core - Release notes and What's new are now available in the web interface
PAM - New provider AWS IAM
PAM - New provider PostgreSQL

Verbesserungen

17

Core - Added recording resolution configuration
Core - Added sealed entry feature to linked credentials
Core - Added support for including entries when duplicating a folder
Core - Added user group support to message & report an issue recipients
Core - Improved notification UI
Core - Improved SSH key entry and provide tool to generate ssh key easily
Core - Improved the launch session button
Core - Removed caching for Active Directory and Entra ID
Core - Sealed entries can now be deleted
Core - Users are now flagged as deleted and permenently removed after a configurable period of time
Gateway - Add possibility to save certificate through RDM
PAM - Allow to run propagation script in a different user context
PAM - Checkout can now be configured optionnal
PAM - Improved how AnyIdentity provider can be tested
PAM - Removed JIT provisionning template account type. Standard PAM account are now used with a configuration
PAM - Restrict SSH key to 1
REST Api - Added support for custom fields

Fehlerbehebungen

4

Core - Fixed an issue where a user vault could not be accessed in RDM even when allowed for the user
Core - Fixed an issue where connecting to DVLS could be long
Core - Improved performance when handling a large number of vault entries, making navigation easier
Core - Several UI update

2025.1.13.0

· August 14, 2025

Sicherheit 1 Fehlerbehebungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

1

CVE-2025-8312 PAM - Resolved an issue where the automatic check-in task could unexpectedly stop

Fehlerbehebungen

1

PAM - Addressed an issue where PowerShell tasks generated by PAM would remain open after a crash

2025.1.12.0

· July 17, 2025

Sicherheit 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

2

CVE-2025-6741 Core - Fixed an issue where connection permissions could be bypassed through secure messages
CVE-2025-6523 Core - Increased the length of emergency codes to fix a vulnerability and prevent brute-force attacks

2025.1.11.0

· June 10, 2025

Sicherheit 1 Fehlerbehebungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

1

Core - Added missing HSTS headers on select routes

Fehlerbehebungen

1

PAM - Fixed an error that was logged when users encountered issues using PAM

2025.1.10.0

· May 28, 2025

Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Fehlerbehebungen

5

Core - Fixed an issue when attempting to view recordings in the Activity Report
Core - Fixed an issue where non-admin users could not approve temporary access requests
Core - Fixed an issue where tags were not saved in scheduled reports
Core - Fixed an issue where the "Clear Clipboard" message didn't always appear when copying passwords or sensitive data
Core - Several UI update

2025.1.9.0

· May 14, 2025

Sicherheit 3 Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

3

CVE-2025-4433 Core - Fixed an issue where a user with the User Management permission could promote users to admins via user groups
CVE-2025-4493 PAM - Fixed an issue where "Assigned provider privileges" in JIT privileged sets would select all available groups when adding a new provider privilege
CVE-2025-5382 Core - Fixed an issue where a user with the User Management permission could remove MFA from an admin user

Verbesserungen

1

PAM - Allowed use of the backslash character (‘') in Windows account names

Fehlerbehebungen

4

Core - Fixed an issue where sessions in the web client would not work when "Prompt on connection" was enabled
Core - Fixed an issue where the "Invalid License" error incorrectly appeared when editing a user
Core - Fixed an issue where users could lose all repository access, causing a red "X" to appear on vault selection in RDM
PAM - Prevented multiple emails from being sent when an account fails to reset its password on schedule

2025.1.7.0

· May 1, 2025

Sicherheit 1 Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

1

CVE-2025-4316 PAM - Fixed an issue where an admin could approve their own checkout even if approval was required

Fehlerbehebungen

3

Core - Fixed an issue where an email was sent to administrators about Tor exception
Core - Fixed an issue where approving a temporary access with default time was failing
PAM - Fixed an issue where JIT elevation was failing on unmanaged account

2025.1.6.0

· April 28, 2025

Funktionen 1 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Funktionen

1

Core - Added support for sending logs to Azure Log Analytics

Verbesserungen

1

Core - Removed all line delimiters from syslog messages

Fehlerbehebungen

6

Core - Fixed an issue where deleting a user would also attempt to remove them from the database
Core - Fixed an issue where the expired entry email did not always display the correct date
Core - Prevented user vault entries from being moved to shared vaults when saving in RDM
PAM - Fixed an issue where checkouts couldn't be granted when "Approve Own Checkout" was set to No
PAM - Fixed an issue where some scheduled password resets did not execute at the correct time
Web - Several UI fixes

2025.1.5.0

· April 2, 2025

Verbesserungen 3 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Verbesserungen

3

Core - Added a fallback mechanism when the Preferred Domain Controller is not available
PAM - Added support for account discovery and account import in RDM
PAM - Added support for listing and editing providers in RDM

Fehlerbehebungen

4

Core - Fixed a potential crash that could occur when logging to Syslog
Core - Fixed issues with SSH sessions that were not working in the web client
Core - Improved performance when navigating vaults in RDM
PAM - Fixed performance issues when checking in a PAM account through the Session Overview

2025.1.4.0

· March 19, 2025

Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Fehlerbehebungen

4

Core - Fixed a potential disconnection issue when using an external login provider
Core - Fixed an error when favorites contained entries the user no longer had access to
Core - Fixed an issue where scheduled backups did not work on shared paths
PAM - Fixed an issue where notification subscriptions were not working with PAM vaults and checkouts

2025.1.3.0

· March 12, 2025

Sicherheit 1 Wichtige Änderungen 1 Funktionen 6 Verbesserungen 23 Fehlerbehebungen 20

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2025.1 is required for this DVLS version

Sicherheit

1

Core - Fixed a security issue in in-app Secure Messages where network requests were not properly verifying authorization

Wichtige Änderungen

1

Changed license validation URL from https://api.devolutions.com to https://quoting.devolutions.com. Make sure your network allows access to this URL

Funktionen

6

Core - Added support for portable license feature
Core - Added support for ServiceNow as a ticketing service
Core - Added support of 'Custom + Inherited' as permission configuration
Gateway - Added a way to clean up recordings on Devolutions Gateway
Gateway - Added centralized update management
PAM - Added a new JIT provisioning account type that allows creating a user in your AD domain for the duration of the checkout time

Verbesserungen

23

Core - Added additional duration options for Devolutions Send message
Core - Added pwned information to the report
Core - Added recording server settings to DVLS
Core - Added search functionality in the system vault
Core - Added support for push notification to RDM devices (Android)
Core - Added support for temporary access on folders
Core - Business users can now open sessions
Core - Improved the "Launch Session" button
Core - My privileged account and My personal credentials are now saved server-side
Core - Notifications are now sent upon entry expiration
Core - The Entry security analyzer report has been improved to include password complexity compliance
Core - The Utilities menu is no longer hidden for business users
Core - User vaults can now be disabled by user
Gateway - Active session recording can now be read (session shadowing)
Gateway - Added support of dynamic connections (Quick Connect, host entries)
Gateway - Health check interval is now set to 5 minutes by default
Gateway - Storage information is now available for managing recordings
PAM - Added a filter to the Active Directory scan to exclude disabled accounts
PAM - Import all Windows local administrators instead of only the default administrator
PAM - Permissions can now be applied to folders
REST Api - Passwords in sessions can now be retrieved
Web - Documentation and attachments can't be modified if entry is checked out
Web - Sessions are now launched in the same browser tab

Fehlerbehebungen

20

Core - Added logging for sealing/unsealing in entry history
Core - Disabled users are now shown as disabled in secure messages
Core - Fixed a paging issue on the Gateways page
Core - Fixed a performance issue with the Data Source Log report
Core - Fixed an error when connecting with SSO in RDM
Core - Fixed an issue in the Activity Logs report where the user filter and user column did not match
Core - Fixed an issue where the "User already exists" error was no longer displayed when importing Entra ID users
Core - Fixed an issue where the JIRA ticketing service was no longer working properly
Core - Fixed an issue where users could not be added to an AD Console entry through the web
Core - Fixed an issue where users could see the User Vault in the Entry Security Analyzer
Core - Fixed an issue where Website entry templates were not visible to business user profiles
Core - Fixed the default application access value when importing multiple user groups
PAM - Fixed an issue where containers could not be selected during an AD scan
PAM - Fixed an issue where PAM account notification subscriptions were no longer working
PAM - Fixed an issue where some accounts were displayed as out of sync after a scheduled password reset
PAM - Fixed an issue where the PAM Password Rotation Report would crash when using a date filter
PAM - Fixed the test connection on PAM providers when using a linked account
PAM - Just-In-Time (JIT) groups requested at checkout are now logged
Web - Added a color code to the security score
Web - Several UI fixes

2024.3.17.0

· May 14, 2025

Sicherheit 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

2

CVE-2025-4316 PAM - Fixed an issue where an admin could approve their own checkout even if approval was required
PAM - Fixed an issue where "Assigned provider privileges" in JIT privileged sets would select all available groups when adding a new provider privilege

2024.3.15.0

· April 7, 2025

Fehlerbehebungen 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Fehlerbehebungen

1

Core - Fixed an issue with the Free Gateway license that prevented launching any session

2024.3.14.0

· March 26, 2025

Sicherheit 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

2

CVE-2025-2277 Core - Fixed an exposure of passwords in the web-based SSH authentication component
CVE-2025-2278 Core - Fixed improper access control in Temporary Access Requests and Checkout Requests endpoints

2024.3.13.0

· March 4, 2025

Sicherheit 1 Wichtige Änderungen 1 Fehlerbehebungen 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

1

CVE-2025-2003 PAM - Fixed an issue where the "Add in Root" permission was not respected in PAM vaults

Wichtige Änderungen

1

Core - We've updated our integration with your Entra ID environment to align with Microsoft Entra's latest security policies. As part of this update, client secrets with an expiration period longer than two years are now deprecated. Please review and update your current configuration by following the instructions in the following link: https://docs.devolutions.net/server/kb/how-to-articles/azure-portal-configuration-guide-microsoft-authentication

Fehlerbehebungen

2

Core - Fixed an error that could occur when exporting login history
Core - Fixed an issue where the folder structure could disappear when adding or editing entries/folders in RDM

2024.3.12.0

· February 20, 2025

Fehlerbehebungen 11

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Fehlerbehebungen

11

Core - Added the OTP section for business users
Core - Fixed a double MFA prompt issue when connecting through RDMW with "Always Ask for Username" enabled
Core - Fixed a duplicate key error in the login history
Core - Fixed a null reference exception when a subscription could not find the user or user group
Core - Fixed an intermittent issue when logging in with MFA
Core - Fixed an issue where the Entry Security Analyzer displayed incorrect dates
PAM - Fixed an error when assigning a checkout review
PAM - Fixed an error when resetting an Oracle account password
PAM - Fixed an error where scanning was not working with AnyIdentity provider
PAM - Fixed an issue where subscriptions to PAM accounts were no longer working
PAM - Fixed an issue where users could not see PAM entry logs

2024.3.11.0

· January 16, 2025

Sicherheit 2 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

2

CVE-2025-1231 PAM - Fixed an issue where Oracle user passwords were not reset after check-in
Core - Fixed an issue where custom permissions were lost after being edited from the Workspace

Fehlerbehebungen

6

Core - Fixed an issue where scheduled backups would not start if more than one scheduler was installed on the same database
Core - Fixed an issue where search functionality did not work in the 'Auto Create on First Login' group selection
Core - Fixed an issue where the "Assign Users to Group" window would break after canceling
PAM - Fixed an error where revoking rights on a deleted account generated excessive logs
PAM - Fixed an issue where some scheduled password resets were not working
PAM - Fixed an issue where some users were unavailable when granting temporary access to an entry

2024.3.10.0

· December 18, 2024

Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Fehlerbehebungen

3

Core - Fixed an issue where logging in was unavailable for a short amount of time after restarting the server
Core - Fixed an issue where the right-click menu was cut off if the entry was at the bottom of the screen
Core - Fixed an issue where the token was not refreshed when using external providers

2024.3.9.0

· November 27, 2024

Sicherheit 1 Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

1

CVE-2024-12149 Core - Fixed an issue with incorrect permission assignments in the user migration feature

Fehlerbehebungen

5

Core - Fixed an issue where domain strategies were displayed as blank
Core - Fixed an issue where the "View Password" permission was required to execute an entry
Core - Fixed an issue where the PWN check was performed on an empty password field
PAM - Fixed a timeout issue when loading a PAM vault in RDM
PAM - Fixed an issue where the permission entry overview always displayed Never when set to Custom + Inherited

2024.3.8.0

· November 13, 2024

Verbesserungen 3 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Verbesserungen

3

Core - Expired messages are now removed automatically upon expiration
Core - Improved performance when switching vaults in RDM
PAM - The domain provider now supports custom LDAP ports

Fehlerbehebungen

4

Core - Fixed an issue where Macro/Script/Tool entry types could not be added to the System vault via RDM
Core - Fixed an issue where notifications would not be sent when targeting subfolders using the event filter
Core - Fixed an issue where the permissions 'Entry History' and 'View Sensitive Information' were not displayed in the grant access settings
PAM - Fixed an issue where the "Request Temporary Access" window was not displaying

2024.3.7.0

· November 4, 2024

Sicherheit 2 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

2

CVE-2024-10971 Core - Fixed an issue where the current password for an entry could be viewed through the password history
CVE-2024-12148 Core - Fixed an issue where some reports could be viewed without the required permissions

Fehlerbehebungen

7

Core - Fixed an error that occurred when using an AnyIdentity with a gateway while the user had no gateway license
Core - Fixed an issue when renaming an entry from the context menu in the Vault tree
Core - Fixed an issue where multiple errors were shown in the log when connecting with a domain
Core - Fixed an issue with the User Vault after a SQL migration
PAM - Fixed an issue when moving a PAM folder to another vault
PAM - Fixed an issue when saving password templates in the PAM vault
PAM - Fixed an issue where the OTP was not displayed on the PAM entry overview

2024.3.6.0

· October 16, 2024

Sicherheit 2 Verbesserungen 4 Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Sicherheit

2

CVE-2025-2280 Core - Fixed an issue where users could bypass the browser extension restriction
PAM - Fixed an issue where a user could see all accounts in a PAM vault even without the view permission

Verbesserungen

4

Core - Added "pwned" information to the Entry Security Analyzer report
Core - Added logging when a recording is viewed or downloaded
Core - Added support for search functionality in the system vault
PAM - Added the 'Entry History' permission for PAM entries and vaults

Fehlerbehebungen

5

Core - Fixed an issue where users couldn't create new entries after a database restore
Core - Fixed an issue with license import when the user had no internet connection and the "Enable Internet Access" feature was enabled
Core - Fixed the default authentication behavior for external providers, restoring the previous behavior
PAM - Fixed an issue when editing the password template of a PAM vault root
PAM - Fixed an issue where the rotation schedule was not displayed in the Password Rotation Report

2024.3.4.0

· October 7, 2024

Verbesserungen 7 Fehlerbehebungen 8

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Verbesserungen

7

Core - Added an option to enable or disable Workspace offline mode in user settings
Core - Added custom time, view limit, and the ability for recipients to delete messages in the Devo Send feature
Core - Enhanced migration process to prevent sending excessive notifications
Core - Moved the "Save As" button in Secure Message for easier use and better visibility
PAM - Added custom fields to PAM entries
PAM - Added status for PAM entries
PAM - Added support for PAM vaults in multiple reports

Fehlerbehebungen

8

Core - Fixed an error in the report when selecting too many parameters
Core - Fixed an error that could occur when editing a vault
Core - Fixed an issue where a double 2FA prompt could appear after logging off and logging back in
Core - Fixed an issue where notification preferences could be lost after updating a user
Core - Fixed an issue where removing administrator rights from a user would still leave all vaults assigned to them
PAM - Fixed a potential timeout issue when loading a PAM vault in RDM
PAM - Fixed an issue where a session could not be opened in the web interface using a PAM account with temporary access
PAM - Fixed an issue where the checkout dialog wouldn't close, leading to confusion about whether the checkout was completed

2024.3.3.0

· September 27, 2024

Verbesserungen 5 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Verbesserungen

5

Core - Migrated Winbox Mikrotik entries to align with RDM and prevent breaking the entry when editing in DVLS
Core - The API documentation is now visible to all users and no longer restricted to admins
PAM - Added support for custom fields
PAM - Added the temporary access option to PAM connections
PAM - Enabled unmanaged accounts to use JIT elevation

Fehlerbehebungen

7

Core - Fixed an issue that prevented setting permissions to "Custom" when creating an entry
Core - Fixed an issue where backups would fail if the path contained a space at the beginning
Core - Fixed an issue where sending a message to multiple users would only send to the first one
Core - Fixed an issue where the user-specific settings' password was not resolved when executing an entry
Core - Fixed an issue with Azure authentication where the token could not be retrieved in some cases
Core - Fixed an issue with the Devo send feature that was broken
Core - Fixed the LDAPGetGroupsByUser function to return groups from the parent domain

2024.3.2.0

· September 23, 2024

Wichtige Änderungen 1 Funktionen 6 Verbesserungen 16 Fehlerbehebungen 10

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.3 is required for this DVLS version

Wichtige Änderungen

1

Core - The legacy recording server is no longer supported

Funktionen

6

Core - Added a feature to restrict license auto assignation to specific user groups
Core - Allow users to specify permissions requested in temporary access request
Core - Web sessions can now be recorded in the browser
PAM - Added automatic check-in for PAM accounts
PAM - Migrated the PAM permission model to align with the shared vault permissions
PAM - The Active Directory (AD) provider can now manage local accounts on domain machines

Verbesserungen

16

Core - Added an action available on an entry to easily share that entry
Core - Added duplicate for documents stored in database
Core - Added expiration time configuration when sending via Devolutions Send
Core - Added new 'high-priority' feature in messaging
Core - Devo-Send can now be used with Devolutions Server Free edition
Core - Export entry tags in 'Entry security analyzer' report
Core - Groups can be synchronized with their identity provider
Core - Improved offboarding of users by allowing conversion of user vault to a shared vault and unassigning licenses when deleting a user
Core - It is now possible to regenerate an application's secret
Core - Kestrel installation runs scheduler tasks
Core - The Entry Security Analyzer report no longer loads all vaults by default, improving initial load time
Core - User groups not found during provider group synchronization now appear as a warning log instead of an error
Core - Users and groups can be configured to be synchronized on a regular basis
PAM - Improved AnyIdentity provider to be able to use Devolutions Gateway
PAM - Just-In-Time (JIT) requested groups now appear in the logs when a request is made during checkout
PAM - Support for additional entry types added to PAM usage policy

Fehlerbehebungen

10

Core - Fixed a performance issue with Active Directory (AD) console
Core - Fixed an issue where a document stored in the database could not be duplicated
Core - Fixed an issue where a user with a password ending in a space was not functional
Core - Fixed an issue where quick connect didn't create logs
Core - Fixed an issue with viewing template groups correctly
Gateway - Vault's custom variables are now resolved for entries configured with a Devolutions Gateway
PAM - Allow application identities to utilize PAM through PowerShell module
PAM - Fixed an issue where a user could approve their own check-out even if they didn't have the rights
PAM - Fixed an issue where the "Run As" password was erased when editing the provider
Web - Several UI fixes

2024.2.13.0

· October 22, 2024

Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Fehlerbehebungen

5

Core - Fixed a issue that prevented the Gateway from functioning
Core - Fixed an issue in the "Add" window where some connection types were duplicated
Core - Fixed an issue where backups would fail if there was a space at the beginning of the folder path
Core - Fixed an issue where removing administrator rights from a user would leave all vaults selected
Core - Fixed an issue where sending a secure message to multiple recipients would only send to the first one

2024.2.12.0

· September 26, 2024

Sicherheit 2 Verbesserungen 2 Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Sicherheit

2

CVE-2024-6512 PAM - Fixed an issue where users could approve their own requests even when the option was disabled
PAM - Fixed an issue where expired checkouts were still accessible when the scheduler was down

Verbesserungen

2

Core - The Entry Security Analyzer report no longer loads all vaults by default, improving initial load time
PAM - Enhanced logs to provide more detailed information when a password policy mismatch occurs

Fehlerbehebungen

3

Core - Fixed an issue that was preventing Devo Send from being used
Core - Fixed an issue where custom variables were not resolved for entries configured with a Gateway
Core - Fixed an issue where the Reset-DSPamPassword command was not working with the PowerShell module

2024.2.10.0

· August 20, 2024

Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Fehlerbehebungen

6

Core - Allowed spaces in user passwords
Core - Fixed an error when exporting a vault in RDM
Core - Fixed an issue where IsPrivate = true always had to be specified when adding an entry to the user vault via PowerShell
Core - Fixed an issue where starting a session with Quick Connect wasn't generating logs
Core- Fixed an error when logging in with conditional access policies
PAM - Prevented the creation of folders with identical names at the same level, which was previously causing an error

2024.2.9.0

· July 25, 2024

Verbesserungen 11

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Verbesserungen

11

Core - Fixed an issue where backup codes 2FA were always failing
Core - Fixed an issue where LDAP authentication was failing with alternate domain suffix and non-ssl
Core - Fixed an issue where password template had wrong information
Core - Fixed an issue where session recording settings were not the right one when entry was created from a template
Core - Fixed an issue where view password permission was needed to launch a session
Core - Fixed an option where PingOne option was available even if PingOne authentication was disabled
Core - Fixed Password rotation report to apply filter on last rotation instead of creation date
PAM - Fixed an issue where PAM checkout requests were not prompted when launching sessions
PAM - Fixed an issue where password can't be shared with Devolutions Send
PAM - Fixed an issue where propagation settings were not saved when adding PAM account manually
PAM - Fixed an issue where SQL accounts reset password were failing

2024.2.8.0

· July 15, 2024

Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Verbesserungen

1

Core - Significantly improved the performance of the Active Directory Console in the web client

Fehlerbehebungen

6

Core - Fixed an issue where backup subscription notifications were not sent
Core - Fixed an issue where login history was generating error messages
Core - Fixed an issue where SSO login was not working with MFA
Core - UI fixes
PAM - Fixed an issue where PAM accounts remained out of sync after password reset on check-in
PAM - Fixed an issue where the Search Mode button was broken in Azure scan configuration

2024.2.6.0

· June 27, 2024

Verbesserungen 1 Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Verbesserungen

1

Core - Display the application identity name instead of the application ID in logs and place where we want to identify the application

Fehlerbehebungen

3

Core - Fixed an issue where editing a permission set was failing
Core - Fixed an issue where the wrong logo was displayed in the side panel
Core - Fixed an issue where using DUO as 2FA was not possible because the user interface didn't let you enter your code

2024.2.5.0

· June 25, 2024

Funktionen 1 Fehlerbehebungen 8

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Funktionen

1

Core - Support delete of multiple entries

Fehlerbehebungen

8

Core - Added a log when a user updates the system settings
Core - Fixed an issue where Devolutions Gateway farms were not considered in Devolutions Gateway permission report
Core - Fixed an issue where entry could not be moved to another vault
Core - Fixed an issue where RDM didn't load security change after vault owner changes
Gateway - Fixed an issue where alternate host could not be used without port configured
Gateway - Fixed issue where it was not possible to watch recording in the web interface
PAM - Fixed an issue where PAM vault could not be accessed if checkout policy was deleted
Web - Several UI fixes

2024.2.3.0

· June 17, 2024

Sicherheit 1 Wichtige Änderungen 1 Funktionen 7 Verbesserungen 17 Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.2 is required for this DVLS version

Sicherheit

1

CVE-2024-4846 Core - Fixed an issue where a user could be authenticated without being asked for the 2FA via another browser tab

Wichtige Änderungen

1

Core - Devolutions Gateway licenses are now by user. A free license valid up to 5 users is now included

Funktionen

7

Core - 5 new security reports: Administrators, System permissions, Devolutions Gateway permissions, Connection permissions and Vault permissions
Core - Added a Devolutions Gateway free license valid for 5 users
Core - Added sealed entry feature
Core - Added vault content type feature
Core - Licenses can now be refreshed to reflect changes
Core - PAM license is now assigned to users
Core - Support RDM connection to DVLS with Azure Proxy

Verbesserungen

17

Core - Actions suggested in security dashboard can now be ignored
Core - Added a way to specify icons for light background or dark background
Core - Added an action "Select in tree" to focus on an entry when the tree is filtered
Core - Added an option to search in all vaults if nothing is found in the current tree
Core - Added recording tab on entries to be able to list all recordings
Core - Added rule based on user tags in conditional access
Core - Added secure message subject in the email sent to user
Core - Added support of Door Code entry
Core - Allow maximum file size to reach 100 Mb
Core - Improved security reports
Core - Improved significantly ARD performance
PAM - Added a display name on a Just In Time (JIT) elevation group
PAM - Improved Just In Time (JIT) elevation to allow the user to set only a subset of groups available on an account during the checkout
PAM - Password rotation is now possible in infrastructure vault
PAM - Support linked credentials on AnyIdentity provider
Rest API - New endpoints to list, create and delete credential entries
Web - Allow to change the side panel width

Fehlerbehebungen

7

Core - Fixed an issue where logs from System Vault were not added in reports
Core - Fixed issue where vaults could not be selected as landing page
Core - Fixed performance issue with LDAP GetGroupByUser
Core - Fixed performance issue with PAM
Core - Removed useless logs to avoid too much logs
Core - Wait a few seconds to get connection with Database when the server starts in case SQL Server is starting as well
Web - Several UI fixes

2024.1.15.0

· June 25, 2024

Sicherheit 1 Fehlerbehebungen 2

Sicherheit

1

CVE-2024-4846 Core - Fixed an issue where a user could be authenticated without being asked for the 2FA via another browser tab

Fehlerbehebungen

2

Core - Fixed an issue where linked account cause problem in RDM
Core - Fixed an issue where user synchronisation was failing

2024.1.14.0

· May 16, 2024

Fehlerbehebungen 3

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Fehlerbehebungen

3

Core - Fixed an issue affecting user cleanup for Okta users
Core - Fixed an issue where new password templates were saved with incorrect default values
Core - Fixed an issue where some subscriptions were being lost

2024.1.13.0

· May 2, 2024

Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Fehlerbehebungen

6

Core - Fixed an issue where modifying an entry via the PowerShell module did not generate a log
Core - Fixed an issue where the domain controller name could not be explicitly entered in the Domain Authentication configuration
PAM - Fixed an issue preventing non-administrators from deleting accounts
PAM - Fixed an issue preventing the deletion of a PAM vault
PAM - Fixed an issue preventing the setting of a custom 'Max checkout time' in vault checkout settings
PAM - Fixed an issue where account heartbeats from AnyIdentity were not functioning

2024.1.12.0

· April 23, 2024

Sicherheit 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Sicherheit

1

DEVO-2024-0007 Core - Fixed a potential vulnerability related to LDAP injection

Fehlerbehebungen

6

Core - Fixed a connection issue with Devolutions Gateway when using LDAP
Core - Fixed a security issue allowing users to see alarm and door codes while editing an entry without the proper view password rights
Core - Fixed an issue where an incorrect error message was displayed when credentials were set to prompt on connection
Core - Fixed an issue where synchronizer previews were not functioning with LDAPS
Core - Fixed an issue with synchronizer when set on My domain setting
PAM - Fixed an issue where referrals to unreachable child domains break password reset and validation

2024.1.11.0

· April 9, 2024

Sicherheit 1 Verbesserungen 2 Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Sicherheit

1

DEVO-2024-0006 Core - Fixed a security issue where JIT requested group names could be forged in checkout requests

Verbesserungen

2

Core - Improved error handling for lost connections during web Active Directory use
Core - Microsoft cache is disabled when Microsoft authentication is turned off

Fehlerbehebungen

5

Core - Fixed a search functionality issue allowing PAM entries to be searched without administrator privileges
Core - Fixed an issue preventing the use of 'Prompt on connection' in the web client
Core - Fixed an issue where users weren't being saved in scheduled reports
Core - Fixed the incorrect rotation schedule time displayed in exported Password rotation reports
PAM - Resolved an issue where the password wasn't consistently updated in the checkout dialog after being reset during check-in

2024.1.10.0

· April 3, 2024

Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Verbesserungen

1

Core - AD synchronizer can now launch using credentials inherited

Fehlerbehebungen

4

Core - Fixed a connection issue involving AD accounts and LDAP UserValidity
Core - Fixed a connection issue with RDM using the free version
Core - Fixed an issue causing an Unauthorized error when attempting to connect to RDM
Core - Fixed an issue where the success backup notification stopped working

2024.1.9.0

· March 28, 2024

Verbesserungen 3 Fehlerbehebungen 5

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Verbesserungen

3

Core - Added door code entry feature
Core - Added user validity check to the domain diagnostic tools
Core - Migrated old free licenses to new ones and enabled switching to a free license by removing the existing license

Fehlerbehebungen

5

Core - Fixed a bug where non-configured domains were not displayed in the source list during Authentication migration
Core - Fixed an issue preventing the editing of vault security levels
Core - Fixed an issue where vaults available for access requests were not visible
Core - Resolved a "bad request" error occurring when attempting to connect to RDM with multiple authentication windows open
PAM - Fixed an issue preventing the saving of unmanaged account passwords

2024.1.8.0

· March 26, 2024

Sicherheit 2 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Sicherheit

2

PAM - Fixed an issue where users could see accounts without the proper permissions
DEVO-2024-0005 PAM - Fixed a JIT feature issue allowing requests for unauthorized groups

Verbesserungen

1

PAM - Improved logging for AD user synchronization failures

Fehlerbehebungen

6

Core - Corrected an issue where the scheduler version wasn't updating on the dashboard
Core - Fixed a connection error when using Netbios name with AD accounts
Core - Resolved a bug preventing password management accounts from saving template groups
PAM - Corrected a bug allowing checkout times beyond the maximum limit
PAM - Fixed a bug preventing PAM readers from launching sessions
UI fixes

2024.1.6.0

· March 18, 2024

Verbesserungen 4 Fehlerbehebungen 9

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Verbesserungen

4

Core - Added an option to display 100 items per page
Core - Added grid size option to the 'Assigned To' section of a License
Core - Removed the possibility to remove all authentication methods, which previously caused users to be unable to connect
PAM - Added more detailed errors for when resetting a Domain user fails

Fehlerbehebungen

9

Core - Fixed an issue where Domain configuration was wiped out in some cases
Core - Fixed an issue where gateways weren't shown when indexing recordings
Core - Fixed an issue where the folder type and override name were not retained when adding an entry from a template
Core - Fixed an issue where the vault owner assignment page was not displayed
Core - Fixed an issue where users' 2FA was still active after being disabled
Core - Fixed an issue where using AD Domain Provider with LDAP's GetGroupsByUser function caused errors
PAM - Checkout button now shown in red when checked out by another user
PAM - Fixed an issue where an approver was unable to approve a request when the time was set to custom mode
PAM - Fixed an issue where updating PAM account attributes was impossible when the provider was unreachable

2024.1.4.0

· March 5, 2024

Sicherheit 3 Wichtige Änderungen 2 Funktionen 11 Verbesserungen 10 Fehlerbehebungen 6

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2024.1 is required for this DVLS version

Sicherheit

3

Core - Fixed an issue where notifications could be accessed without permission
DEVO-2024-0002 PAM - Fixed an issue where PAM Azure account is not removed from groups after JIT elevation
Core - Authentication with Azure/Okta can be configured to validate the token on a regular basis. Client changes required

Wichtige Änderungen

2

Core - Upgraded application from .NET 6 to .NET 8
PAM - Migrate PAM account to be able to support documentations and attachments

Funktionen

11

Core - Active Directory web console is now supported
Core - Added PingOne identity provider as authentication
Core - Added support for sending passwords through in-app messaging or Devolutions Send
Core - Administrators can now configured which notifications they want to receive by email
Core - Domain authentication can now use Devolutions Gateway
Core - DVLS can now be used without license (Free version up to 10 users)
Core - Improved our LDAP stack for Active Directory authentication
PAM - Account used to access Devolutions Server Database are now saved in an internal vault
PAM - Provider's password can now be managed and rotated
Rest API - 3 endpoints are now available to get secret/credential value. API documentation is also available from the UI
Scheduler - Support high availability

Verbesserungen

10

Core - Added a way to know if a user has a user vault or not and warn the user when it is deleted
Core - Added vaults and user groups columns in users report
Core - Added vaults and user groups in user reports
Core - Password list can now shows more password in the page
Core - Prevent users to remove all MFA supported if MFA is required to login
Gateway - Support multiple domains to reach the right KDC server
PAM - Documentations and attachments are now possible on PAM account
PAM - Support favorite vault with PAM vaults
Web - Improved the web interface and show all vaults in the side menu
Web - Support for hardware-accelerated cursors and Kerberos with RDP web client

Fehlerbehebungen

6

Core - Fixed an issue where log cleanup could failed with SQL timeout if too much data had to be deleted
Core - Fixed an issue where serialization error was raised during vault import from .rdx file
Core - Fixed an issue where user was logged in automatically after a force logout by the application
Core - Fixed SSO login with Workspace Browser Extension
PAM - Fixed an issue where PAM account attributes could not be updated if provider was unreachable
Web - Several UI fixes

2023.3.18.0

· May 23, 2024

Sicherheit 1

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2023.3 is required for this DVLS version

Sicherheit

1

DEVO-2024-0007 Core - Fixed a potential vulnerability related to LDAP injection

2023.3.17.0

· April 17, 2024

Sicherheit 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2023.3 is required for this DVLS version

Sicherheit

2

DEVO-2024-0005 PAM - Fixed a JIT feature issue allowing requests for unauthorized groups
DEVO-2024-0006 Core - Fixed a security issue where JIT requested group names could be forged in checkout requests

2023.3.16.0

· March 8, 2024

Sicherheit 1 Fehlerbehebungen 2

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2023.3 is required for this DVLS version

Sicherheit

1

DEVO-2024-0002 PAM - Fixed an issue where PAM Azure account is not removed from groups after JIT elevation

Fehlerbehebungen

2

Core - Fixed an issue where documentation entry could not be created
Core - Fixed an issue where SAP Fronend Server Entry (AddOn) could not be displayed

2023.3.14.0

· February 7, 2024

Fehlerbehebungen 7

Erforderlich If you are using a client (RDM, PowerShell, etc.), version 2023.3 is required for this DVLS version

Fehlerbehebungen

7

Core - Added logs to investigate issues with PublicWebInstanceInformation endpoint
Core - Fixed an issue where login SSO failed with Workspace Web Extension
Core - Fixed an issue where scheduled reports were empty
PAM - Fixed an issue where marking an account as read gave an error
PAM - Fixed an issue where rights were not resolved correctly
PAM - Fixed an issue where standalone credential password was viewable without checkout
Web - Several UI fixes

2023.3.13.0

· December 19, 2023

Verbesserungen 1 Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Verbesserungen

1

Gateways - Now supports multiple KDC servers

Fehlerbehebungen

2

Core - Fixed an issue where launching sessions through the web client was not working
Core - Fixed an issue where non-admin users were unable to search in PAM vaults

2023.3.12.0

· December 13, 2023

Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Verbesserungen

1

Core - Can now retrieve passwords from PAM Account entries on Public API

Fehlerbehebungen

4

Core - Fixed an error that occurred when attempting to retrieve groups by user with Active Directory
Core - Fixed an issue with OTP (One-Time Password) on the Workspace web browser
PAM - Fixed an issue where PAM Oracle accounts couldn't be added or edited
PAM - Fixed an issue where scheduled PAM account password resets were not respecting time settings

2023.3.10.0

· November 29, 2023

Verbesserungen 4 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Verbesserungen

4

Core - Added support for Active Directory and Microsoft Hyper-V dashboard entries
Core - Added support for different URL paths for the authentication page
Core - Added support for hardware-accelerated cursors and Kerberos on RDP web client
Core - Improved user experience by remembering the last login type and automatically selecting the last authentication type

Fehlerbehebungen

5

Core - Fixed a performance issue occurring with a high number of users and user groups
Core - Fixed an issue when renaming a folder on the contextual menu
Core - Fixed an issue where the Workspace browser extension was consistently pwned checking even when the feature was disabled
Core - Fixed several issues related to licenses
Gateway - Fixed an issue where the recording date was inaccurately set to the re-indexing date

2023.3.8.0

· November 21, 2023

Sicherheit 1 Verbesserungen 2 Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Sicherheit

1

CVE-2023-6264 Core - Fixed an issue where gateways list was leaked in Content-Security-Policy header

Verbesserungen

2

Core - Added clipboard support on RDP web client
Core - Added support for CredSSP in Windows PAM Provider

Fehlerbehebungen

2

Core - Fixed an error occurring when attempting to import AD users with PAM account discovery that contain accents in the username
Core - Fixed an issue where Yubikey MFA was not functioning

2023.3.7.0

· November 13, 2023

Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Fehlerbehebungen

5

Core - Fixed a performance issue related to TOR validation
Core - Fixed an error that occurred when attempting to use Yubikey with Duo
Core - Fixed an issue where certain licenses were displayed as expired
Gateway - Fixed an error occurring when attempting to ping
Pam - Fixed an issue where connection failed for the AD provider when the username included the domain name

2023.3.6.0

· November 7, 2023

Verbesserungen 3 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Verbesserungen

3

Core - Added a filter for subscriptions by tags
Core - Added language support for redirection links
PAM - Added HTTPS support for the Windows provider

Fehlerbehebungen

5

Core - Fixed a serialization error
Core - Fixed an error that occurred when selecting VPN entries
Core - Fixed an issue duplicate server routes that were causing an SSO Login Error on the web
Core - Fixed an issue where the trial license was always displayed as free
Web - Several UI fixes

2023.3.5.0

· November 3, 2023

Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Fehlerbehebungen

3

Core - Fixed an issue where a lot of exceptions were logged in data source logs
Core - Fixed an issue where Workspace users were not able to get user vault entries
Web - Several UI fixes

2023.3.4.0

· November 1, 2023

Wichtige Änderungen 1 Funktionen 19 Verbesserungen 12 Fehlerbehebungen 11

Erforderlich If you are using RDM as the client, RDM 2023.3 is required for this DVLS version

Wichtige Änderungen

1

Core - Removed support of legacy security

Funktionen

19

Core - Advanced search can now specify the operation between filters
Core - Dashboard can show card only if data is present
Core - Include archived data in reports
Core - New user settings to show/hide specific entries (archived, disabled, expired) in the tree
Core - Push notifications to Workspace can be enabled/disabled
Core - Support new license format
Core - Support of tags on users
Core - Support Windows Authentication through the web interface
Core - Temporary access can now be requested on credentials
Core - User behavior analytics is available on the system dashboard
Core - User interface profile can now be used to simplify the web interface
Core - Users can be synchronized with their identity provider
PAM - Allow user to send checkout requests to all approvers
PAM - Checkout request can be assigned to a user to help in the approval process
PAM - Just In Time (JIT) elevation for provider Azure AD
PAM - Propagation can now be configured on every level: vaults, folders, and entries
PAM - Support of PAM Active Directory provider through Devolutions Gateway
Web - SSH and Telnet sessions can now be launched through Web Client (via Devolutions Gateway)
Web - System vault can be edited in the web interface

Verbesserungen

12

Core - 'Force token public IP validation' setting is now false by default
Core - An email is sent to the administrator when the scheduler is down
Core - By default, on new installation, log cleanup is configured
Core - Default value to enable DWL for Website entry is now available
Core - Security dashboard shows if offline is available on vaults
Core - Support new entries in the web interface: firearm, insurance number and access code
Core - Use X-Forwarded-For configuration is disabled by default in the new installation
Core - Workspace can be configured by scanning a QR code available in the web interface
Core- Added an icon to the Expired Entry List to show that a password is re-used
Gateway - Added the Gateway ID in the web interface
PAM - Improve PAM usage policies to support more context where PAM accounts can be used
PAM - PAM section is now always visible even without a license

Fehlerbehebungen

11

Core - Fix slowness issues when temporary access was enabled
Core - Fixed an issue when the list of forbidden passwords disappeared when too large
Core - Fixed an issue where Okta users could not be created on first login
Core - Fixed an issue where scheduled reports were not adjusted by daylight saving time
Core - Fixed an issue with the notifications which creates a lot of log
Core - Fixed an issued with variables that were not well resolved in the vault
Gateway - Fixed an issue with Gateway Health to improve performance
PAM - Fixed a performance issue when requesting a PAM vault request
PAM - Fixed an error when Domain Controller was not specified in the AD provider
PAM - Fixed an issue that prevented manual check-in when a checkout had timed out
Web - Several UI fixes

2023.2.11.0

· November 9, 2023

Sicherheit 1

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Sicherheit

1

CVE-2023-5358 Core - Fixed an issue that allows users to retrieve logs from vaults or entries they are not allowed to access

2023.2.10.0

· October 24, 2023

Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Fehlerbehebungen

2

PAM - Fixed an issue that prevented manual check-in when a checkout had timed out
Web - Several UI fixes

2023.2.9.0

· October 3, 2023

Sicherheit 1 Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Sicherheit

1

PAM - Fixed vulnerability issue with the PAM propagation script

Fehlerbehebungen

2

Core - Fixed an issue where the Disconnection Data Source settings were not saved properly
Core - Importing google password doesn't create a legacy website anymore

2023.2.8.0

· September 20, 2023

Verbesserungen 1 Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Verbesserungen

1

Core - User notifications can now be sent based on user type

Fehlerbehebungen

3

Core - Fixed an issue where all sessions were returned as running session
Core - Fixed an issue where comments on session close were not saved
Core - Fixed an issue where user without all rights in Active Directory can not be used to configure a domain

2023.2.7.0

· September 11, 2023

Fehlerbehebungen 9

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Fehlerbehebungen

9

Core - Fixed an issue where error was thrown if an entry was linked on a deleted entry in user vault
Core - Fixed an issue where Okta user can't be created as read only
Core - Fixed an issue where properties "Override RDP Setting" in CyberArk Dashboard entry were not saved
Core - Fixed an issue where scheduled reports were not affected by daylight saving time change
Core - Fixed an issue where Windows Authentication failed if Force token public IP validation was set to true
Core - Fixed issue where opened sessions list was always empty
Gateway - TCP hostname is always marked as not configured in diagnostics
PAM - Fixed an issue where AnyIdentity action script fails when a non-mandatory property is configured as a parameter
PAM - Fixed an issue where PAM account can't be edited when the account is in a folder

2023.2.6.0

· August 21, 2023

Fehlerbehebungen 8

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Fehlerbehebungen

8

Core - Fixed an issue when a User Vault entry is duplicated in the Favorites tab and could not be removed from the User Vault
Core - Fixed an issue when Azure cache erased on Internet loss
Core - Fixed an issue when trying to navigate to a favorite in the user vault
Core - Fixed an issue with the shared vault dashboard that kept refreshing in a loop
Core - Fixed error when filtering (user or user groups) accounts in Microsoft Users Import dialog
Gateway - Fixed an issue when an error occurred when accessing Devolutions Gateway Permission
PAM - Fixed Pam featured not enabled bug
Recording Server - Fixed issue when recording could be saved 'remote'

2023.2.5.0

· July 25, 2023

Verbesserungen 1 Fehlerbehebungen 4

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Verbesserungen

1

Core - Added PAM usage policies for Microsoft RDS Dashboard and Active Directory Dashboard

Fehlerbehebungen

4

Core - Fixed an issue where Devolutions Gateway name was not shown in opened connections report
Core - Fixed an issue where user could not be imported from Azure AD
Core - Fixed temporary access request report to be able to export it
Gateway - Fixed an issue where Devolutions Gateway configuration could not be published

2023.2.4.0

· July 18, 2023

Verbesserungen 1 Fehlerbehebungen 8

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Verbesserungen

1

PAM - Added all sessions type in PAM usage policies configuration

Fehlerbehebungen

8

Core - Fixed an issue where all alarm codes were deleted even if only one had to be deleted
Core - Fixed an issue where CyberArk entry could not be saved with SAML authentication
Core - Fixed an issue where grant temporary access was failling
Core - Fixed an issue where no notification was sent on the Azure AD user created automatically
Core - Fixed an issue where roles can't be retrieved
Core - Fixed an issue where tree could not be loaded in web interface
Core - Fixed temporary access request report to be able to export it
PAM - Allow uppercase and underscore on ssh username

2023.2.3.0

· July 6, 2023

Verbesserungen 2 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Verbesserungen

2

Core - Entry Security Analyzer report can now be done with one or many vaults
Gateway - Allow a custom TCP Hostname on Devolutions Gateway

Fehlerbehebungen

5

Core - Fixed an issue where Syslog configured with UDP didn't work
Core - Fixed an issue where VPN entries from system vault were not listed
PAM - Don't show Privileged Access section without PAM license
Recording Server - Fix an issue where recordings can't be indexed
Web - Several UI fixes

2023.2.2.0

· June 27, 2023

Verbesserungen 5 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Verbesserungen

5

Core - Improved warning message when passwords don't comply with password security settings
Core - New Devolutions Server installation set 'Enable internet access' to true
PAM - Added checkout reason in logs/reports
PAM - Added support for preferred domain controller in AD provider
Recording Server - Added a tool to re-index recordings from different Devolutions Gateways

Fehlerbehebungen

5

Core - Fixed an issue where activity logs could not be opened
Core - Fixed an issue where entries can't be saved in system vault
Core - Fixed an issue where no notification was sent if the delete operation was made with RDM
Gateway - Fixed an issue where Devolutions Gateway could not be used if no ID was configured on it
Web - Several UI fixes

2023.2.1.0

· June 20, 2023

Funktionen 12 Verbesserungen 14 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.2 is required for this DVLS version

Funktionen

12

Deprecated Recording Server - Devolutions Gateway should be used to act as recording server
Core - Added a search tool in System Settings
Core - Added IP List entry type
Core - Added PowerShell Terminal Remoting Directly in the Web Interface
Core - Added the ability to assign a vault owner
Core - Added the ability to link two user accounts to the same license
Core - Added the ability to request access to other vaults
Gateway - Devolutions Gateway can now act as recording server
Gateway - Devolutions Gateway can now be configured for load balancing
PAM - Added temporary just-in-time(JIT) elevation at checkout
PAM - Added the ability to propagate PAM passwords to after rotation
PAM - Expanded privileged account availability with PAM usage policies

Verbesserungen

14

Core - Added more information in log for login information (IP, iso code, emergency access)
Core - Changed default strategy for AD "Get groups by user" from Principal to Directory entry token group
Core - Current and latest version of services/gateways are now shown in the system dashboard
Core - Dashboard user interface improvement
Core - SMTP server and Syslog server status are now shown in the system dashboard
Core - Temporary access can be created by the approver and permission will be granted to the user at the right moment
Core - Temporary access can be requested on entry with link to other entries for credentials, vpn
Core - Temporary access request can now be requested for future use
Core - Upgraded System Dashboard with Syslog and Email Services
PAM - Added more information in logs when an error occurs
PAM - Added PAM checkout requests in advance
PAM - Checkout request can be created by the approver and permission will be granted to the user at the right moment
PAM - New setting to limit the checkout time
PAM - Scripts in AnyIdentity providers can now be ran as a specific user

Fehlerbehebungen

5

CVE-2023-2400 Improper deletion of resources in the user management feature
Core - Fixed an issue where search entries failed if current vault contains special character (%) in description
Core - Security Policies is now renamed Conditional Access Policies
Core - Submit a support ticket is available only for admin
Web - Several UI fixes

2023.1.8.0

· May 25, 2023

Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Fehlerbehebungen

2

Core - Fixed an issue where emergency access failed and user could not access his server
Core - Fixed an issue where HeidiSQL entry type could not be selected

2023.1.7.0

· May 9, 2023

Verbesserungen 2 Fehlerbehebungen 6

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Verbesserungen

2

Core - Added logs during Okta login
Core - Migrate from ADAL (Azure Active Directory Authentication Library) to MSAL (Microsoft Authentication Library) for Azure

Fehlerbehebungen

6

Core - Fixed an issue where custom fields migration was long
Core - Fixed an issue where Windows Authentication failed for first connection
Core - Support ASP.NET 7
PAM - Fixed an account where password rotation failed
PAM - Fixed an issue where PAM account can't be created by a non admin user
PAM - Fixed an issue where scheduled password rotation happens multiple times

2023.1.6.0

· April 21, 2023

Sicherheit 1 Fehlerbehebungen 6

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Sicherheit

1

CVE-2023-0951 Core - Fixed an issue where package created to be sent to support could be downloaded by non admin user

Fehlerbehebungen

6

Core - Added sender username in secure message push notification in Workspace
Core - Fixed an issue where authentication migration from Devolutions Server user to another authentication type failed with an exception
Core - Fixed an issue where passwords with only permission to execute were not sent to DWL
Core - Fixed an issue where session start time in logs was invalid
Core - Increased the startup time limit to avoid server to be stopped during data migration when server is starting
PAM - Fixed an issue where loading privileged accounts list failed with a timeout

2023.1.5.0

· March 30, 2023

Verbesserungen 2 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Verbesserungen

2

Core - Support users migration from Azure AD to Azure AD (different domain name)
Web - MikroTik entry can now be edited in DVLS web interface

Fehlerbehebungen

5

Core - Fixed an issue where Azure AD groups were not migrated on startup and Azure AD groups were not found anymore for users
Core - Fixed an issue where entry security analyzer report was not including password lists
Core - Fixed an issue where locked application keys were not list in Users Locked report
Core - Fixed an issue where two logins were needed to access DVLS
Web - Several UI fixes

2023.1.4.0

· March 22, 2023

Verbesserungen 4 Fehlerbehebungen 6

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Verbesserungen

4

Core - Improved performance when system retrieves Azure AD groups
Core - Report an issue can be sent to any user, not only administrator
PAM - Added forbidden password check for standalone account
Web - Gateway list is now paged when you want to select a gateway on a connection

Fehlerbehebungen

6

Core - Added logs when an entry is added or restored from the web interface
Core - Fixed an issue where checkouts were not visible for administrator in dashboard
Core - Fixed an issue where forbidden passwords list is not visible
Core - Fixed an issue where some folders were missing for DWL
Core - Fixed an issue where synchronizer created wrong folder structure
Web - Several UI fixes

2023.1.3.0

· March 14, 2023

Funktionen 10 Verbesserungen 20 Fehlerbehebungen 8

Erforderlich If you are using RDM as the client, RDM 2023.1 is required for this DVLS version

Funktionen

10

Core - Added support for global images
Core - An issue on an entry can now be reported to notify administrators
Core - Notifications can now be sent to devices running Workspace
PAM - Added a function to generate script headers of AnyIdentity Providers
PAM - Added a function to test Powershell scripts of AnyIdentity Providers
PAM - AnyIdentity Providers can now be imported/exported
Web - Added System Dashboard to display services state
Web - Improved the dashboard to be customizable
Web - RDP session can now e launched through Web Client (via Devolutions Gateway)
Web - VPN/Gateway can now be edited in Web Interface

Verbesserungen

20

Core - Added a new contact type Team/Department
Core - Added a new IT Asset data entry type
Core - Added a new vehicle data entry type
Core - Added a report to find connections with specific status
Core - Added a warning message if less than 10% of a license is available
Core - Added an Archived and Broken Entry status
Core - Added contact link support in Software/License entry
Core - Added many reports in the scheduled report list
Core - Added password generator button in certificate entry
Core - Added the possibility to assign a contact to the credit card owner
Core - Microsoft Authentication cache can now be desactivated
Core - User information from Microsoft users are now synchronized with DVLS users
Gateway - A reg file or a Powershell Script can be downloaded to configure KDC proxy
PAM - Added a link to PAM Provider GitHub repository in AnyIdentity Templates
PAM - Added timeout setting for SSH local user provider
PAM - Renamed Custom Providers by AnyIdentity Providers
Web - Added custom fields edition
Web - Information on dashboard can now be clicked to see the specific information
Web - Moved DVLS license information under Administration -> License
Web - Vaults can now be searched by description

Fehlerbehebungen

8

Core - Fixed an issue where authentication cache was used even if it was disabled
Core - Fixed an issue where copy password button was not available in the overview when it should
Core - Fixed an issue where message about http connection in system dashboard was displayed even if the connection was https
Core - Fixed an issue where scheduled AD synchronizer created incorrect folder names
Core - Fixed an issue where users were not logged in even if the credentials were valid
Core - Fixed issue where administrators were not able to use Launcher
Web - Minor UI fixes
Web - Several UI fixes

2022.3.13.0

· February 21, 2023

Sicherheit 4 Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Sicherheit

4

CVE-2023-0951 Core - Fixed a few API endpoints where users without permission were authorized
CVE-2023-0952 Core - Fixed an issue where linked credential could be leaked on edit entry
CVE-2023-0953 Core - Fixed an issue where SQL injection was possible
CVE-2023-1201 Core - Fixed an issue with improper access control to attachment in secure messages

Fehlerbehebungen

3

Core - Fixed an issue where an administrator was not able to connect to DVLS through Launcher
Core - Fixed an issue where Credential filter could not be used in PAM Checkout notification
Core - Fixed an issue where RDM connection failed with Windows Auth and a security policy was configured with an AD group

2022.3.12.0

· February 13, 2023

Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Fehlerbehebungen

3

Core - Fixed an issue in Devolutions Gateway User Access report
PAM - Fixed an issue where scans were failing in some cases
Web - Fixed an issue where connection name was not visible during edition in dark theme

2022.3.10.0

· February 2, 2023

Sicherheit 1 Fehlerbehebungen 4

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Sicherheit

1

[DEVO-2023-0002] Core - Fixed a security issue where sensitive data was returned even if the user didn't have access to it

Fehlerbehebungen

4

Core - Avoid to send an email on successful backup if user doesn't want to receive it
Core - Fixed an issue where tags with a dot were not displayed correctly
Core - Fixed the hyperlink in backup confirmation email
PAM - Fixed an issue where some PAM vaults or PAM accounts were not found

2022.3.9.0

· January 24, 2023

Funktionen 1 Verbesserungen 1 Fehlerbehebungen 6

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Funktionen

1

Gateway - Support Telnet connection through Devolutions Gateway

Verbesserungen

1

PAM - Enable OTP for standalone account

Fehlerbehebungen

6

Core - Avoid to log useless exception
Core - Avoid to send email on backup success if user doesn't want it
Core - Fixed an issue where deadlock could occur with old Azure AD or Domain groups
Core - Fixed an issue where entries could not be added in folders with DWL
Core - Fixed an issue with Azure SMTP Connections
Core - Fixed an issue with Password Generator where settings were not applied

2022.3.8.0

· December 21, 2022

Verbesserungen 2 Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Verbesserungen

2

Core - Added a password generator button on password field in certificate entry
Core - Improved performance when listing users from a domain, Azure or Okta group

Fehlerbehebungen

3

Core - Fixed an issue where some server settings were not saved properly
Core - Updated the Microsoft users migration to manage missing UPNs
PAM - Fixed an issue where only 25 accounts were displayed in PAM vault

2022.3.7.0

· December 13, 2022

Verbesserungen 4 Fehlerbehebungen 4

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Verbesserungen

4

Core - Added a way to export active users
Core - Added a way to select JIRA tickets from other filters (not only the default filter)
Core - Added configuration to support non-admin user to launch synchronizer
Core - Support user/user group cache for Microsoft Azure Authentication

Fehlerbehebungen

4

Core - Fixed an issue where an error was raised during authentication migration
Core - Fixed an issue where opening documentation in new tab didn't work
Gateway - Fixed an issue where Gateway ID was not synchronized with the Gateway
Web - Several UI fixes

2022.3.6.0

· December 1, 2022

Verbesserungen 1

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Verbesserungen

1

Core - Added HTTP compression to improve performance

2022.3.5.0

· November 25, 2022

Verbesserungen 3 Fehlerbehebungen 9

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Verbesserungen

3

Core - Sub connections can now be resurect with their parent
PAM - Added password rotation schedule at the folder level
PAM - Checkout request or approval can now specify end time instead of checkout duration

Fehlerbehebungen

9

Core - Fixed an issue where accessing license was not possible in some cases for free edition
Core - Fixed an issue where Devolutions Launcher application access was not available even for administrator users
Core - Fixed an issue where entry credential was not available in DWL in some cases
Core - Fixed an issue where search result didn't focus on the entry selected in the result
Core - Fixed issues with VMWare Synchronizer (update of prerequesite needed on DVLS Server via DVLS-Console)
Core - Prompt for comment didn't work in a few cases
Gateway - Fixed an issue where Devolutions Gateway ID was not synchronized automatically by the scheduler
Gateway - Fixed issues where scheduler returned an error when no revocation list was stored in database
Web - Several UI fixes

2022.3.4.0

· November 10, 2022

Verbesserungen 8 Fehlerbehebungen 9

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Verbesserungen

8

Core - Added a button to refresh user information from AD to all users
Core - Added a warning message if a vault has too many entries
Core - Added a way to exclude characters with password template and generator
Core - Added an option to keep all logs archived
Core - Added an option to save password in a shared vault from a secured message
Core - Disable email 2FA if the server doesn't have SMTP configuration
Core - Display the password history in the web interface for the password list entry type
Gateway - Support 'auto assign' with Gateway licenses

Fehlerbehebungen

9

Core - Fixed an issue where attachments couldn't be added in private vault
Core - Fixed an issue where deleting a notification was failing
Core - Fixed an issue where DWL couldn't retrieve website entries from shared vaults
Core - Fixed an issue where reading attachments was raising an error when the encryption at rest was not enabled
Core - Fixed an issue where scheduled reports were adding 30 days instead of running same date every month
Core - Fixed an issue where viewing the password didn't ask for a comment even if it was requested
PAM - Fixed an issue where refreshing the page was loading the first PAM vault
Recording Server - Fixed an issue where processor couldn't complete when a certificate was not trusted
Web - Several UI fixes

2022.3.3.0

· November 3, 2022

Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Fehlerbehebungen

2

Core - Fixed an issue where authentication migration didn't work if username was the same between source and destination
Core - Fixed an issue where RDM could not used any module with license (CyberArk, BeyondTrust, ...)

2022.3.2.0

· November 1, 2022

Wichtige Änderungen 2 Funktionen 12 Verbesserungen 17 Fehlerbehebungen 25

Erforderlich Datenbank-Upgrade erforderlich If you are using RDM as the client, RDM 2022.3 is required for this DVLS version

Wichtige Änderungen

2

Core - RDM User license must be set in the data source
Core - RDM users need one license assigned for each user account

Funktionen

12

Core - Added a way to migrate users from an authentication mode to another (from Active Directory to Azure AD for exemple)
Core - Added permission set to assign permission easily on users
Core - Added support to Okta authentication
Core - Added support to SMTP modern authentication with Azure
Core - Implemented attachment and documentation support for sub connections
Gateway - Added Kerberos authentication via KDC Proxy
Gateway - Added new reports to display Devolutions Gateway permission
Gateway - Added permissions on Devolutions Gateway
Gateway - Sessions launched via Devolutions Gateway can now be killed
PAM - Added description field on PAM account
PAM - Added support for generic providers
Web - Added markdown WYSIWYG documentation editor

Verbesserungen

17

Core - Added a button to refresh favorites
Core - Added a way to select the main account type to bypass the authentication type on login
Core - Added an option to select Azure behavior on login
Core - Added one button in login page for each Active Directory configured
Core - Added options to select Azure behavior on login
Core - Added support for multiple emails in email configuration
Core - Button label can now be configured in login page
Core - Connection icon can now be customized
Core - Improved RDM connection stability with Devolutions Server
Core - Improved security dashboard UI
Core - Removed the option "Current Windows session" as credentials for AD configuration
Core - Renamed 'Custom User' by 'Devolutions Server User'
Gateway - Added a filter in the Devolutions Gateway list
PAM - Added log messages if PAM password propagation failed
PAM - Added possibility to include PAM vaults in search side bar
PAM - Changed the way PAM account are displayed: Removed tiles and display a tree
PAM - Improved PAM Heartbeat failed message to differentiate provider and account name

Fehlerbehebungen

25

Core - Fixed an issue where administrator received an exception about telemetry when internet was not available
Core - Fixed an issue where attachments were corrupted after download
Core - Fixed an issue where backup was failing with invalid path on Linux SQL Server
Core - Fixed an issue where folder structure was visible in DWL even if user didn't have access to the folder
Core - Fixed an issue where importing Azure AD accounts didn't fill the first and last name
Core - Fixed an issue where license capacity could be exceeded
Core - Fixed an issue where Okta groups were recognized as Devolutions Server groups
Core - Fixed an issue where Okta groups were viewed as Devolutions Server groups
Core - Fixed an issue where password set on an attachment was not shown correctly
Core - Fixed an issue where read only users could add attachments or documentation
Core - Fixed an issue where SMTP configuration was not migrated correctly
Core - Fixed an issue where success page was prompted after Windows Authentication
Core - Fixed an issue where user update could lost user group assignments
Core - Fixed an issue where username field could be missing in Emergency Login
Core - Fixed an issue where users avatar were missing
Core - Fixed an issue where Website entry could not be saved with a Password Management license
Core - Fixed an issue where wrong RDM version was loged in reports
Core - Fixed issue in My Account Settings where Dashlane Password and KeePass Server Password were not obfuscated
Core - Fixed issue where email could not be sent in some cases
Core - Removed sensitive information from public endpoint
PAM - Added log message if password propagation failed
PAM - Fixed an issue where PAM section was not available even with a license
Web - Several UI fixes
Web - Several UI fixes
Web - Several UI fixes

2022.2.11.0

· October 3, 2022

Fehlerbehebungen 2

Erforderlich If you are using RDM as the client, RDM 2022.2 is required for this DVLS version

Fehlerbehebungen

2

Core - Fixed an issue where emergency login could not be used in some cases
Core - Fixed an issue where vault could not be deleted for some users

2022.2.10.0

· September 6, 2022

Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2022.2 is required for this DVLS version

Fehlerbehebungen

5

Core - Fixed an issue where SQLException was raised when launching a RDP session
Core - Fixed an issue where user could be disconnected without logoff request
Core - Website entry can now be used by user with Password Management license
PAM - Fixed an issue where checkin was failing with SQL exception
Web - Several UI fixes

2022.2.9.0

· August 23, 2022

Fehlerbehebungen 3

Erforderlich If you are using RDM as the client, RDM 2022.2 is required for this DVLS version

Fehlerbehebungen

3

Core - Avoid to send an error email to administrator when a user fails to logon
Core - Fixed an issue where password on attachment is not shown properly after saving it
Recording Server - Fixed issue where network interruption cause the recording to be lost

2022.2.8.0

· July 29, 2022

Verbesserungen 4 Fehlerbehebungen 5

Erforderlich If you are using RDM as the client, RDM 2022.2 is required for this DVLS version

Verbesserungen

4

Core - Add one button per Active Directory on the login page
Core - Improve ticketing system configuration
Core - Labels on login page can now be configured
Core - Vault password has to respect password template

Fehlerbehebungen

5

Core - Don't send notification to user who made the operation on an entry
Core - Fixed an issue where custom user expiration was impacting domain users or AAD users
Core - Fixed an issue where user could have a white page after login
Core - Fixed an issue where users could be included in a domain group or AAD group even if he was not a member
Web - Several UI fixes

2022.2.6.0

· July 11, 2022

Verbesserungen 3 Fehlerbehebungen 10

Erforderlich If you are using RDM as the client, RDM 2022.2 is required for this DVLS version

Verbesserungen

3

Core - Automatically logout idle users on web interface can be disabled
Core - Update security dashboard to adjust scoring
PAM - Improve the copy button to avoid a sub menu for OTP on PAM account

Fehlerbehebungen

10

Core - Fixed an issue where default expiration was not set in secure message
Core - Fixed an issue where default vault was assigned to users by default even if that vault was not in user template configuration
Core - Fixed an issue where favorite folder could not be created
Core - Fixed an issue where getting the datasource information was failing
Core - Fixed an issue where login with Microsoft/Azure AD user was failing
Core - Fixed an issue where user could be in an Azure Group in DVLS even if it was not member of that group in Azure AD
Core - Fixed an issue where user could not be saved if an invalid license was assigned to that user
PAM - Fixed an issue where Azure AD Users provider secret key could not be updated
PAM - Fixed an issue where fetching groups of a scan configuration was failing
Web - Several UI fixes

2022.2.5.0

· July 4, 2022

Wichtige Änderungen 3 Funktionen 10 Verbesserungen 14 Fehlerbehebungen 23

Erforderlich Datenbank-Upgrade erforderlich RDM and Devolutions Server Console 2022.2 are required to use this version

Wichtige Änderungen

3

Core - .NET 6.0 is now required
Gateway - Devolutions Gateway now requires a license (unlicensed usage will be refused except for side-by-side installation that can have up to 5 concurrent sessions without a license)
Core - Website entry (previously "Web Browser (HTTP/HTTPS)") now has Workspace browser extension enabled by default

Funktionen

10

Core - Emergency access to allow an access even if providers are down (Azure or AD)
Core - New permission : "Delete Documentation"
Core - New permission : "View Sensitive"
Core - Notifications : Users can be notified on actions made on entries
Core - Security policies available to allow/deny users with different conditions
Core - Security policies available to force/skip 2FA with different conditions
Gateway - Support for new protocols : VNC, ARD, SCP, SFTP, PowerShell (WinRM, SSH), Embedded Websites
PAM - Add link with ticketing system (JIRA) to list tickets during the checkout operation
PAM - Support for password reset for MySQL users, Oracle users and Cisco users
PAM - Support for standalone privileged accounts

Verbesserungen

14

Core - Added "append to the username" and "prepend to the username" modes for OTP usage
Core - Added a button to test ticketing system configuration
Core - Added more fields in asset dashboard (UPN, custom fields)
Core - Allow restoring deleted documentation pages
Core - Dashboard page has been removed and integrated on vault dashboard to be like RDM
Core - Redesign the login page
Core - Redesign the web interface
Core - Removed sensitive data from user list
Core - Security improvement: use new function (PBKDF2-HMAC-SHA1) to calculate the password hash
Core - Show the group name or username in permission table
Core - Support exporting/importing the documentation of an entry
PAM - Added filters for providers and scan configurations
PAM - Improve the reset password confirmation prompt
PAM - Renamed Team Folder by PAM Vault

Fehlerbehebungen

23

Core - Fixed an issue where 2FA was bypassed when connecting with Windows Authentication
Core - Fixed an issue where adding images in documentation was raising an error
Core - Fixed an issue where Azure AD user can't be imported manually
Core - Fixed an issue where Entry Security Analyzer report was not available for user with permission
Core - Fixed an issue where microsoft user was not able to login if he had been added manually
Core - Fixed an issue where the client IP was not set properly
Core - Fixed an issue where user couldn't access the gateway configuration even if he had the permission
Core - Fixed an issue where user remains connected after disconnecting him through 'Connected user list'
Core - Fixed an issue where wrong RDM versions were saved in Login History report
Core - Fixed diagnostic report to be the same as RDM
Core - Fixed issue where a new user could have rights if a user with the same name has already existed
Core - Fixed security issue by processing "Entry Security Analyzer" permission
Core - Improved error message when vault name already exists
Core - Removed the vault assignment window when importing users. Vaults from user template are used
PAM - Fixed an issue where a folder could not be deleted
PAM - Fixed an issue where all accounts were returned for a non admin user
PAM - Fixed an issue where view roles definitons couldn't be access from quick scan
PAM - Fixed an issue where windows scan failed if no local user exist
PAM - Removed redirect URI field in Azure AD provider configuration
Web - Fixed an issue where long vault name with hyphen broke the avatar
Web - Fixed an issue where multiple or wrong vault icon were shown
Web - Fixed an issue where view password button could disappear in the entry overview
Web - Several UI fixes

2022.1.13.0

· May 11, 2022

Wichtige Änderungen 1 Funktionen 1 Verbesserungen 4 Fehlerbehebungen 8

Wichtige Änderungen

1

Core - Improve Office365 authentication process. The redirect URI in Azure must be changed

Funktionen

1

Core - Initial support for Devolutions Workspace

Verbesserungen

4

Core - Added logs during Windows authentication process
Core - Support Microsoft Authentication Library (MSAL) for Office365 authentication
Core - Use object ID instead of UPN for Office365 users
Web - Improve UI of Devolutions Gateway diagnostic

Fehlerbehebungen

8

Core - Cleanup tokens table
Core - Fixed an issue where Devolutions Gateway could not be uploaded
Core - Fixed an issue where expiration date didn't show up in password list
Core - Fixed an issue where landing page was not applied after a login
Core - Fixed an issue where user group type was wrong after import
Core - Removed "SessionRequired" errors sent to administrator
Recording Server - Fixed an issue where recording server used 100% CPU
Web - Several UI fixes

2022.1.12.0

· April 4, 2022

Verbesserungen 5 Fehlerbehebungen 7

Verbesserungen

5

Core - Give more information to user when they can't be logged in
Core - Logs can be cleaned up with a timeframe
Core - Office365 authentication supports automatic user creation from a specific group
Core - Removed some exceptions sent to administrator that were not critical
Core - Support multiple vaults export

Fehlerbehebungen

7

Core - Fixed an issue if a vault template has been created
Core - Fixed an issue where DWL can't find the matching sub-connections
Core - Fixed issues in the login process
PAM - Fixed an issue where importing from a scan didn't work the first time
PAM - Fixed an issue where searching a PAM account changed the priviledged account folder
PAM - Fixed an issue with SSH scan
Web - Several UI fixes

2022.1.10.0

· March 15, 2022

Verbesserungen 11 Fehlerbehebungen 6

Verbesserungen

11

Core - Added a "Move" permission on entries
Core - Added a menu item to expand/collapse all in vault tree
Core - Administrators can now ask a change password at next logon when they reset user password
Core - Allow $REPOSITORY_NAME$ variable in name
Core - ARD entry: Add configurable connection timeout
Core - Removed Wayk Client entry
Core - Support 2FA with Windows Authentication
Core - Support export/import multiple vaults with attachments and documents
Core - Support password expiration on custom users
Gateway - Added a diagnostic tool
PAM - Added a search tool to help selecting a privileged account

Fehlerbehebungen

6

Core - Fixed a few authentication issues
Core - Fixed an issue when exporting entries kept folders even if user asked to remove them
Core - Fixed an issue where dates what not displayed
Core - Fixed an issue where RDM logoff was failing
PAM - Fixed an issue where searching in PAM Account didn't search in folders
Web - Several UI fixes

2022.1.9.0

· February 18, 2022

Wichtige Änderungen 1 Verbesserungen 3 Fehlerbehebungen 7

Wichtige Änderungen

1

Core - RDM 2022.1 is mandatory to use DVLS 2022.1. Connection from old RDM will be refused

Verbesserungen

3

Core - Entry's name can now be edited directly in the vault tree
Core - Move Devolutions Launcher CAL and users CAL licenses to Administration/License section
Core - Support gender "Unspecified" for passport entry

Fehlerbehebungen

7

Core - Fixed an issue where documentation page links didn't work
Core - Fixed an issue where Domain Functional Level 2012R2 was not supported
Core - Fixed an issue where login was not possible on an HTTP installation where the hostname was used in URL
Core - Fixed an issue where SMS 2FA was failing
Core - Fixed Windows Authentication
Web - Fixed web client to avoid cryptokey exception
Web - Several UI fixes

2022.1.7.0

· February 15, 2022

Wichtige Änderungen 5 Funktionen 7 Verbesserungen 28 Fehlerbehebungen 26

Erforderlich Datenbank-Upgrade erforderlich RDM and Devolutions Server Console 2022.1 are required to use this version

Wichtige Änderungen

5

Core - .NET Framework 4.8 is now required
Core - HTTPS is strongly recommended, application encryption level will be removed
Core - Initial OAuth support. Windows authentication is no longer supported with 2FA
Gateway - Devolutions Gateway now requires a license (unlicensed usage will show a warning)
DWL has to be logged in separately

Funktionen

7

Core - Email notifications for temporary access
Core - Support for DVLS PAM entry
Gateway - License integration
Gateway - SSH connection support
PAM - Azure AD Provider
PAM - Local Windows Accounts Provider
PAM - PAM Dashboard in Remote Desktop Manager

Verbesserungen

28

Core - "DNS Name" has been replaced by "Access URI"
Core - Added "Privileged Account" on the folder credential option
Core - Added a group filter in import AD Users dialog
Core - Added server and client IP address in syslog messages
Core - Added UserInfoHistory in the cleanup logs feature
Core - Don't accept domain with functional level too low
Core - Fixed an issue where user can't be imported if a domain was down
Core - Improved multi vault search performance
Core - Search results in passwords list
Core - Sort TAGS in the dashboard and tag selection dialog
Core - Support for new RDM file format (v2) to import
Gateway - Added option "Force using IP address for RDP connections"
Gateway - Added support for alternate hosts
Gateway - Support inherited Gateway
PAM - Added a password template at provider level
PAM - Added scan delta summary
PAM - Improved error message on synchronization status
PAM - Move all PAM Account at root level in a team folder
Web - Added 'Assign All Vaults' button in users and user groups dialogs
Web - Added a few SSH properties in Edit view
Web - Added a search bar in 'Privileged account credential' type selection
Web - Added a warning on entry deletion if a shortcut exist
Web - Added icon in PAM UI to help color blind people
Web - Added shortcut icon in vault tree
Web - Only admin user can submit a support ticket
Web - Rebranded Devolutions Authenticator to Devolutions Workspace
Web - Sort approvers in PAM checkout dialog
Web - Support DVLS PAM entry in web interface

Fehlerbehebungen

26

Core - DVLS Free doesn't support PAM
Core - Fixed an issue to display the right number of users in a license
Core - Fixed an issue where "Automatic User Creation" parameter was not saved
Core - Fixed an issue where "Prompt for comment" was not displayed with "Copy API key"
Core - Fixed an issue where a user without the view password permission could view the password
Core - Fixed an issue where changing the time for O365 caching was not saved
Core - Fixed an issue where custom user groups can not be created without custom authentication activated
Core - Fixed an issue where documentation view was wrong
Core - Fixed an issue where Duo returns invalid 2FA with a domain user
Core - Fixed an issue where entries with temporary access were not sent back to DWL
Core - Fixed an issue where export vault was not logged
Core - Fixed an issue where password in passwords list could be lost
Core - Fixed an issue where passwords in private vault were not available in web interface
Core - Fixed an issue where RDM connection to DVLS failed
Core - Fixed an issue where RDM was disconnected from DVLS
Core - Fixed an issue where some folders in vaults were not available in RDM
Core - Fixed an issue where ticket number was not saved in activity logs
Core - Fixed an issue where user was not able to login
Core - Fixed issue where date format was wrong
Core - Fixed Syslog message format to set the hostname with DVLS IP
Core - Include Local Account entries in password rotation reports
PAM - Fixed an issue where PAM checkouts failed with a non-admin user
Web - Fixed an issue where view attachment with pdf extension failed
Web - Fixed translation strings
Web - Several UI fixes
Web - Several UI fixes

2021.2.14.0

· December 13, 2021

Fehlerbehebungen 3

Fehlerbehebungen

3

Added robots.txt for security purpose
Fixed an issue where custom user groups can not be created without custom authentication activated
Fixed an issue where passwords were lost after sorting passwords in a password list

2021.2.13.0

· November 18, 2021

Verbesserungen 4 Fehlerbehebungen 5

Verbesserungen

4

Core - Added a new license for the PAM Module (the license is included for those already using the PAM module with a DVLS license bought before September 30th 2021)
PAM - Added local Windows account management
Web - Added an option to regenerate Devolutions Gateway key pair on demand
Web - Added batch edit to grant permissions all at once on an entry

Fehlerbehebungen

5

Core - Fixed an issue where a user can delete entries without permission
Core - Fixed the display of shortcut entries
Core - Stack overflow error when migrating the domain user groups with their SID
PAM - Fixed an issue where approval workflow didn't work when approved by an "approver"
Web - Several UI fixes

2021.2.10.0

· October 25, 2021

Verbesserungen 4 Fehlerbehebungen 9

Verbesserungen

4

Core- Manage OTP option getting OTP from link credentials
Web - Added an "apply to all" action when setting the allowed applications
Web - Added the option to view the Gateway's logs and opened sessions
Web- Added a filter ''Has access'' in security grant permission & Vault assignment

Fehlerbehebungen

9

Core - Root is empty exception- can't save entry
Core - SQL exception when refreshing cache using legacy security
Core- Error LockRecursionException
Core- Notifications with negative conditions
Core- Option - Enable Remote Monitoring SSH
PAM- Saving security permission on folder
Web - Cannot save a second template
Web - Error while trying to check out a PAM account in the vault section
Web- System Message formatting

2021.2.8.0

· October 4, 2021

Wichtige Änderungen 1 Funktionen 8 Verbesserungen 16 Fehlerbehebungen 3

Wichtige Änderungen

1

Improved Devolutions Gateway to use key pair from DVLS, older deployments need to be reconfigured

Funktionen

8

Free version available for 3 users / 100 entries
Multi-domain supported with Platinum license type
PAM - Password Propagation
PAM - Password rotation report
PAM - Password rotation Scheduled
Web - Added Asset section on entries
Web - Support synchronizer entry
Web- Can import from Google Password csv file

Verbesserungen

16

2FA available in all edition
Core - New option to sent scheduled report to an email address that is not a user
Core - Sends email when a temporary access is granted
Deprecated Authanvil and Vasco as 2FA
PAM - a message is sent when a request is approved
PAM - added OTP on privilege account
PAM - CheckOut request are Auto approve when done by approver him self
PAM - Report of password rotation
RDM- Document in entries available in Offline mode
Web - Add indicator when attachment and document are link to the entry
Web - Simplify the Documentation tutorial editor
Web - Template available in Quick add setting per vault
Web- Add OTP source on session entry
Web- Better performance loading vault
Web- Improve way of granting permission
When assigning system permission, the read only user are no longer shown

Fehlerbehebungen

3

Hide Password Template mode Readable in entry setting
Several fixes & adjustments
Web - Edit user Administrator , fix the number of vaults

2021.1.20.0

· July 19, 2021

Fehlerbehebungen 2

Fehlerbehebungen

2

Core - The column is missing from LogingHistory_Archive
Web - Error parsing dates when using custom dates on reports

2021.1.19.0

· June 30, 2021

Sicherheit 1 Fehlerbehebungen 1

Sicherheit

1

Core - connections/partial endpoint returns private key although it is Sensitive information

Fehlerbehebungen

1

Issue when adding a documentation on entries

2021.1.17.0

· June 17, 2021

Funktionen 3 Verbesserungen 6 Fehlerbehebungen 8

Funktionen

3

Core - Added VMRC as launchable connection type for the launcher
Core - New system setting for Authentication Office365- recurrence on the schedule cache
Core - Support Temporary access requests

Verbesserungen

6

Core - Added daily caching refresh for domain and Office 365 users
Core - Added usage of DNS name instead of the IP address for Radius 2FA
Core - Updated SMTP options when configuring emails
Web - Add Tel protocol to phone numbers on the entries dashboard
Web - Added confirmation when moving and entry using drag & drop
Web - Updated the background image for 2K display

Fehlerbehebungen

8

Core - "Invalid data sent" when trying to save the Host Linked(Vault)/Inherited
Core - Allow rest api usage by applications
Core - Can't download Session recording form Recording Server in RDM
Core - Error when generating the expired entries report
Core - Fixed required permissions to edit an entry's documentation
Web - Cannot access administration if app name is ADMIN
Web - Fixed the resolving when the checkout setting is set to root
Web - save credentials and content in a message sent

2021.1.10.0

· May 11, 2021

Fehlerbehebungen 4

Fehlerbehebungen

4

Core - Fix errors on connection with user that has no shared vault available
Core - Fix opened connections report conversion error
Core - Fix X-Forwarded-For usage
Web - Fix vault selector not loading

2021.1.9.0

· April 16, 2021

Verbesserungen 1 Fehlerbehebungen 4

Verbesserungen

1

Web - Added options to export the user vault when migration fails

Fehlerbehebungen

4

Core - Fix User vault migration with names longer than 200 characters
Core - Unable to save both User CAL and Launcher licenses
Core - Unable to save the Email settings without Username and Password
Core - Unable to save VPN with Wayk bastion

2021.1.7.0

· March 30, 2021

Wichtige Änderungen 2 Funktionen 10 Verbesserungen 27 Fehlerbehebungen 43

Erforderlich Remote Desktop Manager 2021.X update required

Wichtige Änderungen

2

Core - The user vault has now the same features as a standard vault (i.e.: attachments, history, documentation)
Introduced a distinction between sensitive properties and passwords in Information Entries. The view password permissions now only affect passwords specifically

Funktionen

10

Core - Added support for Devolutions Gateway (Jet)
Core - Added the "Last login" report
Core - Added the entry type: azure service principal
Core - Added the field Tenant ID on API Key
PAM - Added a system of policies on team folders for easier management
PAM - Added the delta between results when scanning a domain
Web - Added support for default icon color
Web - Added the option when enter a licence or request a trial when the license is expired or when there is no license
Web - The interface is available in read-only when the license is expired or when there is no license
Web - The scheduled reports now support more reports

Verbesserungen

27

Core - Added a timeout setting to Radius configuration
Core - Added Devolutions Authentificator as a supported 2FA
Core - Added handling of the custom controls on web entries for DWL
Core - Added the authentication method on the login history report
Core - Added the expression "is not" when setting a filter on a subscription
Core - SqlException when starting a connection from a templage
Core - Syslog events, only sends the title of the stack trace
Core - Updated the library for sending emails
Web - Added a download button on document's dashboard
Web - Added a message when the license is expired
Web - Added custom fields on web entries
Web - Added multiple gateways on SCP and SFTP entries
Web - Added multiple gateways on SSH Shel, SSH Tunnel and SSH Port Forward entries
Web - Added Recents, on the new entry dialog
Web - Added recovery codes for OTPs
Web - Added the "Disconnect Data Source" option in the administration section
Web - Added the OPT on Web entries
Web - Added the option to set the "Allow Offline" to a vault
Web - Added the options to view and download the Private key
Web - changed UI
Web - Manage the password setting "Force Default Template"
Web - Remove the email being mandatory when creating a user
Web - secure message, Added the options to "Delete All" and "Mark all as read"
Web - Update the default date range to "today" instead of "Last 7 days" on the activity log report
Web - Updated Radius login labels
Web - Updated the icons
Web - Updated the scrolling when navigating to an entry from the search

Fehlerbehebungen

43

Core - Access was denied on api call for the documentaion
Core - Error SecurityTokenExpiredException received several time a day
Core - Error when adding an email to a user that didn't already had one
Core - Error when enabling the Windows Event Log
Core - Error when importing in the Private Vault
Core - Error with RDM on limited mode
Core - Fix access denied error on documentation
Core - Fix CORS
Core - Fix templates showing in the activity logs
Core - MaxMind GeoIP block everything
Core - Sql Injection
Core - Updated date format on reports
Core - Updated the default STMP Port
Core - Updated the SQL Queries when doing cleanup tasks to avoid timeouts
Core - Wrong log in "Connected User" report when connected from the Launcher
RDM - Cannot download Session recording form Recording Server in RDM
Web - "Prompt for comment" memo is overflow window is not tall enough
Web - Bad email format result in JSON error when editing a user
Web - Checkout UI issue on Firefox
Web - Error when trying to upload an SSH key
Web - Fix cannot assign users and user groups when creation a vault
Web - Fix error on reports when no vault is selected
Web - Fix loading the domain user speed issue
Web - Fix secure message color in dark mode
Web - Fix should not be able to set status on an entry when a check out is required
Web - Fix the vault menu item being available when there are no vault
Web - Fix variable not resolved on connections
Web - Fix variable not resolved on sub-connections
Web - Infinite loading when Azure token expires
Web - Missing icons on the web interface
Web - notification subscriber edit window is not tall enough
Web - On the Login History reports is not showing all entries
Web - RDP Template doesn't save "local ressources"
Web - Tab title is not updated
Web - The licence count is not updated when managing licenses
Web - The password reset is not applied when switching users
Web - The recurrence is not shown properly on the scheduled report calendar
Web - The website does not load properly when the the database is not reachable
Web - UI issue in Vault on Firefox
Web - UI issue when adding a user
Web - Unable to create a Contact Company entry in a folder
Web - User loses its license when changing the user type
Web -Cannot change Offline Mode for user groups