PT-2025-45343 · Amazon Web Services · Res+1

Published 2025-11-06 · Updated 2025-11-06 · CVE-2025-12815

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AWS Research and Engineering Studio versions prior to 2025.09

Description An ownership verification issue exists in the Virtual Desktop preview page within the Research and Engineering Studio (RES) on AWS. This issue may allow a user with network access to view metadata from another user’s active desktop session, including periodic desktop preview screenshots.

Recommendations Upgrade to version 2025.09 or above.

Fix

Weakness Enumeration

CWE-283

Related Identifiers

CVE-2025-12815

GHSA-X3CX-G8G9-75HV

Affected Products

Research/Engineering Studio

Res

References · 6

• https://github.com/aws/res/releases/tag/2025.09 · Patch
• https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv · Vendor Advisory
• https://aws.amazon.com/security/security-bulletins/AWS-2025-026 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12815 · Security Note
• https://t.me/CVEtracker/36695 · Telegram Post