CVE-2024-12310CWE-287

Bypass of Login Screen on Shared Kiosk Workstations

High · published July 23, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

A vulnerability in Imprivata Enterprise Access Management (formerly Imprivata OneSign) allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of keyboard shortcuts.

This issue affects Imprivata Enterprise Access Management versions 5.3 through 24.2.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-07-23T11:53Z
EPSS history
Timeline
  • 23 JUL 11:53Z
    Bypass of Login Screen on Shared Kiosk Workstations
    cvelistv5