PT-2025-45343 · Amazon Web Services · Res+1
CVE-2025-12815
·
Published
2025-11-06
·
Updated
2025-11-06
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
AWS Research and Engineering Studio versions prior to 2025.09
Description
An ownership verification issue exists in the Virtual Desktop preview page within the Research and Engineering Studio (RES) on AWS. This issue may allow a user with network access to view metadata from another user’s active desktop session, including periodic desktop preview screenshots.
Recommendations
Upgrade to version 2025.09 or above.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Research/Engineering Studio
Res