CVE-2025-12815

Medium CVSS: 5.3

An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots.

To mitigate this issue, users should upgrade to version 2025.09 or above.

Vendor

Product

CWE

CWE-283

Yayın Tarihi

2025-11-06 18:15:39

Güncelleme

2025-11-06 19:45:09

Source Identifier

ff89ba41-3aa1-4d27-914a-91399e9639e5

KEV Date Added

Kategoriler

CWE-283 MEDIUM 2025

Referanslar

https://aws.amazon.com/security/security-bulletins/AWS-2025-026/ https://github.com/aws/res/releases/tag/2025.09 https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv