Patch Version 9.2.2 Released

Do you want to be notified of future product updates?

Are you subscribed to this category? If not, or if you're not sure, expand me to see how!

How to subscribe

Bug Fixes and Miscellaneous Updates

The following overview highlights the updates and fixes included in the Password Secure 9.2.2 bugfix release on April 1, 2025.

Improvements

  • Added “Tools” category in the Web App: Provides quick access to various functionalities from a dedicated menu.
  • User unlock capability via the Web App: Administrators can directly unlock locked user accounts from within the Web App, streamlining user management.

Bug Fixes

  • Various important stability and performance improvements for the new Web App.
  • Resolved issues with incorrect text loading.
  • Corrected language selection functionality within the Web App.
  • Fixed the ability to move passwords between organizational units using the “Edit” view.

Security Enhancements

  • Documents with restricted file extensions are no longer downloadable.
  • The “Hostname” field for SSH applications now strictly accepts valid DNS names and IP addresses (both IPv4 and IPv6).
  • Blocked storage of potentially harmful file extensions as document links, improving overall system security.

Miscellaneous

  • Improved ECC migration by allowing the cleanup of non-migratable data.

The following table contains a comprehensive list of updates and fixes introduced in this version

Component Description Case # Escalation #
Web App (Advanced View) A list is no longer switching back to page 1 when an object was closed. 366007
The layout of the web app is no longer broken when switching from basic view to advanced view. 373176
It’s no longer possible to create a seal template without name. 370357
Some missing components of the new design of the web app have now also been updated. 373852
Some errors in which texts were not loaded correctly have been fixed. 373739
The web app is loading the correct language again. 376097 4263440, 4263763, 4263889
Passwords can be moved to a different organisation unit using the ‘Edit’ view again. 377345 4263521, 4263951
Web App (Basic View) Some errors in which texts were not loaded correctly have been fixed. 373739 4263440, 4263763, 4263889
Server Messages that are sent to a syslog server no longer have a leading Byte Order Mark (BOM). 363211 4261156
The server is now validating the file extension of a document. 374117
The timeout when creating a new database and when running an SQL benchmark has been increased. 375120
The automatic check for corrupted passwords is operational again. 376833
Browser-Extension The autofill function of the browser extension has been improved. Websites that react to the ‘webkitAnimationEnd’ event no longer hang. 367721 4262369

Compatibility

The following client versions are compatible with Admin Client Version 9.2.2.32703:

Windows Client:

  • Version 9.2.2.32703

WebClient:

  • Version 9.2.2.32703

NOTE: With the release of 9.2.2.32703, support for version 8.15.4.29321 and older has stopped.

Setup Check Hashes (SHA-51 Hash)

English Server Setup (pss9.2.2.32703-en.msi

b5f1043c4d77ce8278125d8a440131c6df10a5cd747f7720f1ac587a8c9485c36184fb6b4f57b730436f829e92cc32e3dc0893ac54aaa358e7f6a4b4416ead33

German Server Setup (pss9.2.2.32703-de.msi)

2fb14bf1042fa3aa638ade7023f4e3057eca41264c23c0c7d25aa657c76b98adc66cde8d111b7526eaae328db8a53f1277b5136bd2165d874cdee802ab9f3778

English Client Setup (psc9.2.2.32703-en.msi)

1bcbdae3bf9acd1bf7a5a518c36dc9878a1f8d3df57593280c6f0e3c5bc36e1c03a22d2e644a350a3f5153a89753830a7a7dedf5225916ada1b39ba654dda809

German Client Setup (psc9.2.2.32703-de.msi)

12aeddf030c7da350ec58383528d4e65a7efae0ac4d8734e6267aee0c30fe5fb736c72c4e128686333efdb3f9c9ccf68e1cb1a61f8d00eca736079c194c49a60

Need help with this update?

There are many different ways to get help with our products!

Situation Action
If you feel the product is broken and not working as intended… Contact Support
If you have a question you’d like to ask other experts… Create a discussion in the community: Password Secure > Discussions & Questions
If you have a feature request… Let our product team know directly: #password-secure:feedback
If you have something cool to show… Show everyone what you built: Password Secure > Show & Tell

What are your thoughts?

We are always happy to hear from our users on what you like, and what you hope to see in the future. Please, share your thoughts below!

I just turned back from 9.2.2 to 9.2.0. The browser add-on does not work, says it needs 9.2.2 but i do not get an update for it. Also the searchbar font is black and not readable. All buttons are shown like “Toolbox.NewPasswordItem”, “Toolbox.OpenItem”. Should not show “Toolbox..” and i use it in german language, now shown in english.

This seem to me that there are some issues that need to be fixed first.

2 Likes

Hi @Sascha_Linde,

Have you opened a case with our support team? If not, could you please open a case so that our team can review this in more detail with you?

Regards,
Gerrit

Hey Sascha – thanks a lot for the quick feedback! :folded_hands:

Apologies for the delay with the browser extensions. Since each browser store reviews and approves new releases on its own schedule, these delays can occasionally happen. At the moment, the latest version is already available in Edge, but we’re still waiting on Chrome.
(Thanks again for the heads-up — we’ll make sure to highlight this more clearly in future release communications!)

We’ve also double-checked the Web App on our end and couldn’t reproduce any of the reported behavior. It’s most likely a cache issue — doing a full reload while bypassing the cache should resolve it.

If not, as Gerrit mentioned, please create a ticket with our support team so we can investigate further.

Let us know if there’s anything else — we’re happy to help!

Cheers,
-sascha

Just as feedback: Updating the server, web app, and client simultaneously is always a challenge for us. We have 100+ installations in the field, and even with SCCM, it takes time for all of them to update. This causes downtime and requires prior notice, making the process more complex. It would really help if there were at least some compatibility between versions so we could upgrade the server and client independently and install this security patch earlier.

4 Likes

Hey Lukas - thanks so much for your feedback. We always appreciate hearing from our users and learning more about the real-world challenges you face during implementation.

This topic is also tricky for us. We aim to maintain extended compatibility between server and client versions whenever possible. However, specific technical changes - especially those involving our Windows app - sometimes require us to limit compatibility to ensure stability and performance.

That said, improving version compatibility is definitely on our radar, and we’re actively exploring ways to improve it in future releases. Thanks again for sharing your thoughts! :+1:

Cheers,
Sascha

1 Like

Where can the hash values for the Installer Files be found? Thanks

Hi Martin,

Thanks for your question! I’ve added the hash values to the original post—please check there for the details. Let me know if you need anything else.

Best regards,
Hano

4 Likes

Dear Sascha

We have problems with applications which are connecting through the API. For an example the DevolutionsRDP Manager is no longer able to get Passwords from Password Secure. Are there any changes regarding the API authentication? Thanks

Hey Martin :waving_hand: – great to have you in the community! :heart:

We’re aware of some ongoing integration issues (not limited to a specific version) and are actively working on a solution from both ends. In the meantime, it would be super helpful if you could share the specific behavior with our support team — any additional details are always appreciated and help us speed things up.

Thanks again for reaching out! :raising_hands: Cheers -sascha

Hello Mr. Martens,

We are also experiencing the same issue during the setup of version 9.2.2.32703 — there is no API connection to Devolutions’ Remote Desktop Manager.

We have opened a ticket on both sides. The lack of an API connection to RDM is an absolute showstopper for us, and as a result, we are unable to address the identified security vulnerabilities.

ADV-2025-009 – Remote Code Execution Vulnerabilities in Netwrix Password Secure

Is there any chance that a standalone security patch will be made available for versions that cannot be updated directly?

Especially in light of the following announcement from Devolutions:

regards
Dany Jo

2 Likes

Thanks for raising this — we know many of you rely on this integration and want clarity. While the integration has been in place for a long time and has gone through its share of updates and maintenance from both sides, we’ve decided not to change the current level of partnership at this time.

As a result, the integration is no longer being actively developed. However, we will try again to explore a solution to support existing users and ensure stability where possible. If there are changes that impact your setup, we’ll communicate clearly and provide guidance.

We understand this may raise questions, and we’re here to help you navigate any transitions. Please don’t hesitate to reach out to our support team with specific concerns.

Cheers,
Sascha

Hello Mr. Martens,

thank you. But in your answer is an contradiction:

  • On one hand, it says:
    “the integration is no longer being actively developed” – meaning the integration is no longer under active development.
  • On the other hand, it also states:
    “we will try again to explore a solution to support existing users and ensure stability where possible” – which implies that there might still be further efforts to support and maintain stability.

Why is this contradictory?

If there is no active development, it’s unclear how solutions for existing users or stability improvements would be delivered. It sounds like development has stopped, yet there are still intentions to make changes or offer support – which seems contradictory or at least ambiguous.

A clearer statement (e.g., “no new features, but critical fixes might still be addressed”) would help clarify the actual scope of ongoing support.

1 Like

Hey :waving_hand: – thanks so much for your follow-up and for digging into this so thoroughly. You’re absolutely right to ask for clarity, and we want to reassure you that we’re actively working on it.

We’ll be sharing more details, guidance, and plans as soon as we’re able — we just need a bit more time to work through everything properly.

In the meantime, we really appreciate your patience and understanding. And of course, if you have any immediate concerns or need support, we’re here to help.

Cheers,
-sascha

1 Like