Login Request a demo
High severity · published Jul 23, 2025
CVE-2024-12310
Bypass of Login Screen on Shared Kiosk Workstations
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in Imprivata Enterprise Access Management (formerly Imprivata OneSign) allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of keyboard shortcuts. This issue affects Imprivata Enterprise Access Management versions 5.3 through 24.2.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Enterprise Access Management · Imprivata
5.3 through 24.2 · source: vendor
Affected product
EA
Enterprise Access Management
Imprivata
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12310
www.redguard.ch
https://www.redguard.ch/blog/2025/07/23/cve-2024-12310-imprivata-bypass-of-login-screen/