ByteOS Network

NVD Vulnerability Details :

CVE-2025-35114

Received

Source-9119a7d8-5eab-497f-8521-727c672e3725

Published At-26 Aug, 2025 | 23:15

Updated At-26 Aug, 2025 | 23:15

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	8.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-1392	Secondary	9119a7d8-5eab-497f-8521-727c672e3725

References

Hyperlink	Source	Resource
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-239-01.json	9119a7d8-5eab-497f-8521-727c672e3725	N/A
https://wiki.agiloft.com/display/HELP/What%27s+New%3A+CVE+Resolution	9119a7d8-5eab-497f-8521-727c672e3725	N/A
https://www.cve.org/CVERecord?id=CVE-2025-35114	9119a7d8-5eab-497f-8521-727c672e3725	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History