CNNVD-202510-2059 Information

CNNVD ID

CNNVD-202510-2059

CVE-2025-10228

  • CNNVD Published: 2025-10-14

Description (Chinese)

Rolantis Agentis是土耳其Rolantis公司的一个用于企业信息管理和自动化处理的软件。 Rolantis Agentis 4.44之前版本存在授权问题漏洞,该漏洞源于会话固定问题,可能导致会话劫持。

Description (English)

Rolandis Agentis is a software for enterprise information management and automated processing at Rolantis, Turkey. There was a mandate gap in the previous version of Rolandis Agentis 4.44, which stemmed from a fixed session and could lead to a session hijacking.

Hazard Level

Medium

Vulnerability Type

授权问题

Affected Vendor

Rolantis

Published

2025-10-14

Last Modified

2026-02-24

References

https://www.usom.gov.tr/bildirim/tr-25-0336

Patch

https://thpower.pangutech.dev/Weekly/Report

Share on: