CVE-2025-10228
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-10-14
Last updated on: 2025-10-14
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking.This issue affects Agentis: before 4.44.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rolantis | agentis | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-384 | Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Session Fixation issue in Rolantis Information Technologies Agentis software versions before 4.44. It allows an attacker to hijack a user's session by fixing the session identifier, potentially gaining unauthorized access.
How can this vulnerability impact me? :
The vulnerability can lead to session hijacking, allowing attackers to impersonate legitimate users, which can result in unauthorized access to sensitive information, data manipulation, and disruption of services.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70