Solutions

Remote Connection

Remote connection management

Boost productivity, decrease costs, and increase security with a centralized platform where you can manage a wide range of remote connections and tools.

Remote Connection

Password management

Improve your security strategy without reducing productivity by using a password management solution.

Remote Connection

Privileged access management

Diminish the risk of insider threats and cyberattacks while providing audit and compliance requirements for your team.

Remote Connection

Remote access management

Establish a secure entry point for internal or external segmented networks that require authorized just-in-time (JIT) access.

Remote Connection

In the technology world, use cases are only as good as the value someone derives from them. That's why at Devolutions we craft straightforward example use cases to help you and your team choose the best solution for your ideal productive environment.

Products

Remote Desktop Manager

The best remote connection manager in the industry

Devolutions Hub

Cloud-hosted password manager built for IT professionals

Devolutions Server

Self-hosted credential manager built for IT professionals

Devolutions PAM

Privileged access manager built for IT professionals

Devolutions Gateway

Secure remote access management — no VPN required

Devolutions Free

We believe in making powerful tools accessible to everyone

Companion Tools

Workspace

Mobile, desktop application & browser extension

Launcher

Remote connection launching tool

PowerShell

Cmdlets that interact with Devolutions products

Devolutions Send

Secrets sharing made quick, secure, and simple

Support

Devolutions blog

Devolutions blog

Stay up to date with our weekly articles on our blog, In The Trenches.

Community forum

Community forum

The Devolutions Forum is the place to go to connect with your peers and the Devolutions team.

Devolutions documentation

Devolutions documentation

Get answers to product specifications, settings and more on our documentation.

Knowledge base

Popular Knowledge Base articles solving common roadblocks and helping using best pratices.

Contact our support team

HELP

PHONE

service@devolutions.net

+1 844 463.0419

Level 1 support only — Monday to Friday: 7:30 a.m. to 6:00 p.m. EDT

Report a security issue

While we do take care of the security of our products, the fast-changing nature and complexity of security may inadvertently expose our software. Please check out our security commitment for more information.

RESOURCES

Use cases Success stories Report & whitepapers Legal & privacy Security & compliance Miscellaneous Glossary (IT and security) Newsroom Media

Contact

Technical support Sales Contact information

Security & Compliance

Security & Compliance Reporting a Security Issue Advisories

DEVO-2024-0007

Summary

Devolutions Server is affected by a vulnerability.

Affected Products

Devolutions Server 2024.1.11.0 and earlier

Change Log

17/5/2024 - Initial publication

Severity

Medium

Product

Devolutions Server

Fix Version

2024.1.12

Improper input validation in PAM JIT elevation feature allows LDAP injection

Description

Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request.

Remediation and Workarounds

Upgrade to Devolutions Server 2024.1.12.0 or higher

Severity

Medium 6.0 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Products

Devolutions Server 2024.1.11.0 and earlier

CVE(s)

CVE-2024-5072