CVE-2025-2600

MEDIUM Year: 2025
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-285
View all →

Vulnerability Description

Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticated password to use the ELEVATED_PASSWORD variable even though not allowed by the "Allow password in variable policy". This issue affects Remote Desktop Manager versions from 2025.1.24 through 2025.1.25, and all versions up to 2024.3.29.

Related Vulnerabilities

CVE-2019-1851

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the External RESTful Services (ERS) API of the Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to generate arbitrary certificates signed by the In...

CWE-2852019

CVE-2020-9081

MEDIUM
CVSS:6.8(Medium)

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could al...

CWE-2852020

CVE-2019-12671

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to gain shell access on an affected device and execute commands on the underlying operating system (OS)...

CWE-2852019

CVE-2022-34434

MEDIUM
CVSS:6.7(Medium)

Cloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control vulnerability within the Postgres database. A threat actor with root level access to either the vApp or c...

CWE-2852022

CVE-2023-28385

MEDIUM
CVSS:6.7(Medium)

Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.

CWE-2852023

CVE-2023-32662

MEDIUM
CVSS:6.7(Medium)

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access.

CWE-2852023