BaseFortify

Publication date: 2025-10-14

Last updated on: 2026-06-05

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-14

Last Modified

2026-06-05

Generated

2026-07-06

AI Q&A

2025-10-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10228

EUVD

EUVD-2025-34152

Affected Vendors & Products

Vendor	Product	Version / Range
rolantis	agentis	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

This vulnerability is a Session Fixation issue in Rolantis Information Technologies Agentis software versions before 4.44. It allows an attacker to hijack a user's session by fixing the session identifier, potentially gaining unauthorized access.

Impact Analysis

The vulnerability can lead to session hijacking, allowing attackers to impersonate legitimate users, which can result in unauthorized access to sensitive information, data manipulation, and disruption of services.

Hi! I’m here to help you understand CVE-2025-10228. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70