CVE-2025-35114: Agiloft local privilege escalation via default credentials
Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35114?
CVE-2025-35114 is considered a significant vulnerability due to the potential for local privilege escalation through default credentials.
How do I fix CVE-2025-35114?
To fix CVE-2025-35114, users should upgrade to Agiloft Release 30.
What are the risks associated with CVE-2025-35114?
The risks associated with CVE-2025-35114 include unauthorized access and control of the Agiloft application due to the use of default credentials.
Which versions of Agiloft are affected by CVE-2025-35114?
Agiloft versions prior to Release 30 are affected by CVE-2025-35114.
Is user action required for CVE-2025-35114?
Yes, user action is required to mitigate CVE-2025-35114, primarily through upgrading the software.