← Back

CVE-2025-35114

nvd nist
Published: Aug 26, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.7
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 9119a7d8-5eab-497f-8521-727c672e3725 (Secondary)

Description

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30.

Affected (1)

Products: Atlassian: Agiloft
Atlassian
1 product
Agiloft
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Agiloft
From 19 to 30

Related CWEs

CWE-1392
Use of Default Credentials
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (3)

Source: 9119a7d8-5eab-497f-8521-727c672e3725
Third Party Advisory
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Release NotesVendor Advisory
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Third Party Advisory

Timeline

No history available yet.