Threats tagged 'ghsa-22q3-4g3j-wq87'

CVE-2025-37159 is a vulnerability in the web management interface of the AOS-CX OS user authentication service. It allows an authenticated remote attacker to hijack an active user session. Exploitation could enable unauthorized access to the session, potentially allowing the attacker to view or modify sensitive configuration data. The vulnerability requires high privileges and user interaction to exploit. The CVSS score is 5.8, indicating medium severity.