Vulnerability Description
Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faulty business logic.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | < 2024.3.31.0 |
Related Weaknesses (CWE)
References
- https://devolutions.net/security/advisories/DEVO-2025-0004/Vendor Advisory
FAQ
What is CVE-2025-1636?
CVE-2025-1636 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadverte...
How severe is CVE-2025-1636?
CVE-2025-1636 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-1636?
Check the references section above for vendor advisories and patch information. Affected products include: Devolutions Remote Desktop Manager.