CVE-2025-35115 — Agiloft insecure download of system packages
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the d…
Published: 2025-08-26 · CVSS: 9.2 · CVSS 4.0
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7