PT-2025-41864 · Rolantis Information Technologies · Agentis

Onurcan Genç · Publicado 2025-10-14 · Atualizado 2026-06-05 · CVE-2025-10228

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rolantis Information Technologies Agentis versions prior to 4.44

Description A session fixation issue exists in Rolantis Information Technologies Agentis. This allows an attacker to set or manipulate a user's session identifier before authentication, potentially leading to session hijacking.

Recommendations Update Rolantis Information Technologies Agentis to version 4.44 or later.

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2025-10228

Produtos afetados

Agentis

Referências · 8

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0336 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-10228 · Nota de Segurança
• https://usom.gov.tr/bildirim/tr-25-0336 · Nota
• https://twitter.com/CVEnew/status/1978032040365691233 · Publicação no Twitter
• https://twitter.com/CveTodo/status/1978046630357082511 · Publicação no Twitter
• https://t.me/cveNotify/166160 · Publicação no Telegram
• https://twitter.com/cracbot/status/1979865162409468019 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/1978033035942494390 · Publicação no Twitter