Devolutions Server Console 2022.3.4 and earlier Remote Desktop Manager 2022.3.23 and earlier
Initial Publication - 2022-11-25
High
Remote Desktop Manager, Devolutions Server Console
RDM 2022.3.24, DVLS Console 2022.3.5
The MSI installers for Devolutions Server Console and Remote Desktop Manager were vulnerable to a local privilege escalation. This issue is caused by a vulnerability in the Advanced Installer product. The following Advanced Installer release fixes this issue : https://www.advancedinstaller.com/release-20.1.html
The version of Advanced Installer used to generate Remote Desktop Manager and Devolutions Server MSI installer files was vulnerable to a privilege escalation.
Upgrade to Devolutions Server Console to 2022.3.5 and higher
Upgrade to Remote Desktop Manager to 2022.3.24 and higher
High - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Devolutions Server Console 2022.3.4 and earlier
Remote Desktop Manager 2022.3.23 and earlier
Pending
Jean-Luca Gruber