Portal Portal Forum Forum Devolutions Force Devolutions Force Devolutions Hub Business Devolutions Hub Business Devolutions Hub Personal Devolutions Hub Personal Download RDM RDM Workspace Workspace Launcher Launcher

Security & Compliance

Security & Compliance Reporting a Security Issue Advisories

DEVO-2022-0007

Summary

It is possible to bypass the application lock in Remote Desktop Manager when Duo SMS two-factor is used.

Affected Products

Remote Desktop Manager 2022.2.14 and earlier

Change Log

Initial publication - 2022-09-12

Severity

High

Product

Remote Desktop Manager

Fix Version

2022.2.15

Application lock bypass with Duo SMS two-factor

Description

It is possible to bypass the application lock in Remote Desktop Manager when Duo SMS two-factor is used.

Remediation and Workarounds

Upgrade to Remote Desktop Manager 2022.2.15 and later.

Severity

High - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Remote Desktop Manager 2022.2.14 and earlier.

CVE(s)

CVE-2022-3182