4.6
/ 10
MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Description
In Secure Access 12.70 and prior to 14.20, the logging
subsystem may write an unredacted authentication token to logs under
certain configurations. Any party with access to those logs could read
the token and reuse it to access an integrated system.
subsystem may write an unredacted authentication token to logs under
certain configurations. Any party with access to those logs could read
the token and reuse it to access an integrated system.
Basic Information
ID
CVE-2026-0519
Source
Absolute
Published
Jan 17, 2026 at 01:13
Affected Product
Vendor
Absolute Security
Product
Secure Access
Version
12.70
Affected Versions
Absolute Security Secure Access 12.70