Insufficient Logging in Remote Desktop Manager by Devolutions

CVE-2025-2562

What is CVE-2025-2562?

The autotyping feature in Devolutions Remote Desktop Manager for Windows is affected by an insufficient logging vulnerability. This allows an authenticated user to utilize a stored password without generating an associated log event. This lack of logging could potentially enable unauthorized access to sensitive information, impacting the integrity of security practices within the application. Various versions of the product, specifically Remote Desktop Manager versions from 2025.1.24 to 2025.1.25, as well as earlier versions up to 2024.3.29, are susceptible to this issue.

References