Vulnerability Database

315,294

Total vulnerabilities in the database

CVE-2024-6057

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allows an attacker that has compromised an access to an RDM instance to bypass the vault master password via the offline mode feature.

  • Published: Jun 17, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-6057
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
devolutions / remote_desktop_manager - 2024.1.32.0