Remote connection & IT management

Boost productivity, decrease costs, and increase security with a centralized platform where you can manage a wide range of remote connections and tools.

Workforce password management

Improve your security strategy without reducing productivity by using a password management solution.

Privileged access management

Diminish the risk of insider threats and cyberattacks while providing audit and compliance requirements for your team.

Remote access management

Establish a secure entry point for internal or external segmented networks that require authorized just-in-time (JIT) access.

Solutions

All-in-one IT security toolbox for small teams.

Explore all solution packages

Guided proof of concept (POC)

Integration center

Unified solutions: seamless integrations with Devolutions

Products

The best remote connection manager in the industry

Cloud-hosted password manager built for IT professionals

Self-hosted credential manager built for IT professionals

Privileged access manager built for IT professionals

Secure remote access management — no VPN required

We believe in making powerful tools accessible to everyone

Companion Tools

Mobile, desktop application & browser extension

Remote connection launching tool

Cmdlets that interact with Devolutions products

Secrets sharing made quick, secure, and simple

System service to control privileged operations

Resources

Devolutions
Academy

Your FREE go-to hub for mastering Devolutions' suite of products and services.

Devolutions
forum

The Devolutions Forum is the place to go to connect with your peers and the Devolutions team.

Devolutions
documentation

Get answers to product specifications, settings and more on our documentation.

Devolutions
blog

Stay up to date with our weekly articles on our blog, the toolbox for your IT success.

Use cases Success stories Reports & white papers Glossary (IT and security)

Contact

Technical support Sales Contact information

Security & Compliance

Advisories Reporting a Security issue Trust Center

DEVO-2021-0006

Summary

An incomplete permission check allows users to perform operations on entries without the required permissions when using the batch "Custom Powershell" action.

Affected Products

Remote Desktop Manager 2021.2.14 and earlier

Change Log

2021-10-14 - Initial Publication

Severity

High

Products

Remote Desktop Manager

Fix Version

2021.2.16

Permissions bypass with batch Custom Powershell

Description

Users could perform operations on entries without the required permissions when using the batch "Custom Powershell" action.

Remediation and Workarounds

Update to Remote Desktop Manager 2021.2.16 or higher

Severity

High - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

Remote Desktop Manager 2021.2.14 and earlier

CVE(s)

CVE-2021-42098