CVE-2023-2282: Devolutions Remote Desktop Manager

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass administrator-enforced Web Login restrictions and gain access to entries via an unexpected vector.

Affected products

• Devolutions Remote Desktop Manager: up to and including 2023.1.22

Published 2023-04-25. Last modified 2026-06-17.