Vulnerability Description
An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate this issue, users should upgrade to version 2025.09 or above.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://aws.amazon.com/security/security-bulletins/AWS-2025-026/
- https://github.com/aws/res/releases/tag/2025.09
- https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv
FAQ
What is CVE-2025-12815?
CVE-2025-12815 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another us...
How severe is CVE-2025-12815?
CVE-2025-12815 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12815?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.