What is CVE-2025-1636?

CVE-2025-1636 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Information Disclosure. CVSS score: 6.5/10. Published 2025-03-13.

How severe is CVE-2025-1636?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Information disclosure in Devolutions Remote Desktop Manager

CVE-2025-1636

Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Manager 2024.3.29 and earlier on Windows allows an authenticated user to inadvertently leak the My Personal Credentials in a shared vault via the clear history feature due to faulty business logic.

Vulnerability class: Information Disclosure

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Devolutions Remote Desktop Manager — versions 0
Devolutions Remote_desktop_manager

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2025-1636?: CVE-2025-1636 is a medium-severity vulnerability in Devolutions Remote Desktop Manager, classified under Information Disclosure. CVSS score: 6.5/10. Published 2025-03-13.
How severe is CVE-2025-1636?: Medium severity. CVSS v3 base score is 6.5 out of 10.