Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-35115

Agiloft insecure download of system packages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Agiloft Agiloft

Default version status: unknown

  • 0 to < Release 30affected
  • Release 30unaffected

References