Sécurité et conformité
Nous respectons les normes les plus élevées pour protéger vos données et garantir la confiance.
DEVO-2022-0012
The MSI installers for Devolutions Server Console and Remote Desktop Manager were vulnerable to a local privilege escalation.
This issue is caused by a vulnerability in the Advanced Installer product.The following Advanced Installer release fixes this issue :https://www.advancedinstaller.com/release-20.1.html
Produits affectés
Journal des modifications
Initial Publication - 2022-11-25
High - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local privilege escalation in RDM and DVLS installers.
The version of Advanced Installer used to generate Remote Desktop Manager and Devolutions Server MSI installer files was vulnerable to a privilege escalation.
Produits affectés
CVE(s)
CVE-2023-25396
Mesures correctives et solutions de contournement
Upgrade to Devolutions Server Console to 2022.3.5 and higher
Upgrade to Remote Desktop Manager to 2022.3.24 and higher
Crédits
Jean-Luca Gruber