Remote connection & IT management

Boost productivity, decrease costs, and increase security with a centralized platform where you can manage a wide range of remote connections and tools.

Workforce password management

Improve your security strategy without reducing productivity by using a password management solution.

Privileged access management

Diminish the risk of insider threats and cyberattacks while providing audit and compliance requirements for your team.

Remote access management

Establish a secure entry point for internal or external segmented networks that require authorized just-in-time (JIT) access.

Solutions

All-in-one IT security toolbox for small teams.

Explore all solution packages

Remote Desktop Manager & CyberArk

Integration center

Unified solutions: seamless integrations with Devolutions

Products

The best remote connection manager in the industry

Cloud-hosted password manager built for IT professionals

Self-hosted credential manager built for IT professionals

Privileged access manager built for IT professionals

Secure remote access management — no VPN required

We believe in making powerful tools accessible to everyone

Companion Tools

Mobile, desktop application & browser extension

Remote connection launching tool

Cmdlets that interact with Devolutions products

Secrets sharing made quick, secure, and simple

System service to control privileged operations

Resources

Devolutions
Academy

Your FREE go-to hub for mastering Devolutions' suite of products and services.

Devolutions
forum

The Devolutions Forum is the place to go to connect with your peers and the Devolutions team.

Devolutions
documentation

Get answers to product specifications, settings and more on our documentation.

Devolutions
blog

Stay up to date with our weekly articles on our blog, the toolbox for your IT success.

Use cases Success stories Reports & white papers Glossary (IT and security)

Contact

Technical support Sales Contact information

Security & Compliance

Advisories Reporting a Security issue Trust Center

DEVO-2022-0010

Summary

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

Affected Products

Remote Desktop Manager 2022.3.13 to 2022.3.24.

Change Log

Initial publication - 2022-12-7

Severity

Medium

Products

Remote Desktop Manager

Fix Version

2022.3.26

Remote Desktop Manager Azure SQL privilege escalation

Description

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.

Remediation and Workarounds

Update to Remote Desktop Manager 2022.3.26 or higher.

Severity

High - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

Remote Desktop Manager 2022.3.13 to 2022.3.24

CVE(s)

CVE-2022-3641