CVE-2024-12310: Bypass of Login Screen on Shared Kiosk Workstations
A vulnerability in Imprivata Enterprise Access Management (formerly Imprivata OneSign) allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of keyboard shortcuts. This issue affects Imprivata Enterprise Access Management versions 5.3 through 24.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12310?
CVE-2024-12310 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2024-12310?
To fix CVE-2024-12310, upgrade Imprivata Enterprise Access Management to a version above 24.2.
What systems are affected by CVE-2024-12310?
CVE-2024-12310 affects Imprivata Enterprise Access Management versions ranging from 5.3 to 24.2.
What types of attacks could exploit CVE-2024-12310?
CVE-2024-12310 could be exploited by an attacker to bypass the login screen and gain unauthorized access to the Windows system.
Who is responsible for mitigating CVE-2024-12310?
It is the responsibility of organizations using affected versions of Imprivata Enterprise Access Management to mitigate CVE-2024-12310 by applying the necessary patches.