CVEvulnerability

CVE-2025-12815

5.3 MEDIUM Published 2025-11-06 Modified 2026-10-07 Official page ↗

Status: Deferred
Published: 2025-11-06
Last modified: 2026-10-07
Assigner: ff89ba41-3aa1-4d27-914a-91399e9639e5
CVSS 4.0 (ff89ba41-3aa1-4d27-914a-91399e9639e5): 5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (ff89ba41-3aa1-4d27-914a-91399e9639e5): 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses: CWE-283

Description

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate this issue, users should upgrade to version 2025.09 or above.

Weakness · CWE (1)

CWE-283 Unverified Ownership weakness

References

https://aws.amazon.com/security/security-bulletins/AWS-2025-026/ aws.amazon.com
https://github.com/aws/res/releases/tag/2025.09 github.com
https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv github.com

CVE-2025-12815

Description

Related

Weakness · CWE (1)

References