CVE Details
Basic Information
| Title | Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 |
|---|---|
| Type | cve |
| Published | 2025-07-30T23:36:17.426Z |
| Modified | 2025-07-30T23:36:17.426Z |
Product Information
| Vendor | Absolutee Security |
|---|---|
| Product | Secure Access |
| Version | 0 |
CVSS Information
| Base Score | 5.3 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:H |
AI Analysis
| AI Description | This vulnerability allows attackers with administrative access to overwrite policy rules without proper permissions. It has low attack complexity but requires high privileges. The impact on confidentiality and availability of subsequent systems is high. |
|---|---|
| AI Severity | Medium |
| AI Vendor | Absolute |
| AI Product | Absolute Secure Access |
| AI Version | Prior to 13.56 |
Affected Products
- Absolutee Security Secure Access 0
Additional Information
| Source | Absolute |
|---|
Description
CVE-2025-49084 is a vulnerability in the management console
of Absolute Secure Access prior to version 13.56. Attackers with administrative
access can overwrite policy rules without the requisite permissions. The attack
complexity is low, attack requirements are present, privileges required are
high and no user interaction is required. There is no impact to
confidentiality, the impact to integrity is low, and there is no impact to
availability. The impact to confidentiality and availability of subsequent systems
is high and the impact to the integrity of subsequent systems is low.
of Absolute Secure Access prior to version 13.56. Attackers with administrative
access can overwrite policy rules without the requisite permissions. The attack
complexity is low, attack requirements are present, privileges required are
high and no user interaction is required. There is no impact to
confidentiality, the impact to integrity is low, and there is no impact to
availability. The impact to confidentiality and availability of subsequent systems
is high and the impact to the integrity of subsequent systems is low.