Skip to content
OpenAdvisories
Medium WID-SEC-2025-1677 4 CVEs

Absolute Secure Access: Mehrere Schwachstellen

Published Jul 29, 2025 · Updated Jul 30, 2025 · Revision 2 · de-DE

Vendor: Absolute Software Product: Secure Access

Summary

Ein entfernter authentisierter Angreifer mit hohen Privilegien kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um erhöhte Privilegien zu erlangen, Daten zu manipulieren und vertrauliche Informationen preiszugeben.

Product

Absolute Secure Access ist eine Sicherheitslösung, die einen sicheren Netzwerkzugriff für Endgeräte ermöglicht, unabhängig von deren Standort.

Vulnerabilities 4

  • High 7.0
    CVE-2025-49083

    Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

    CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the security …

    Absolute Security Secure Access
  • Medium 5.3
    CVE-2025-49084

    Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

    CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrite policy rules without the requisite permissions. The attack complexity is low, attack requirements …

    Absolutee Security Secure Access
  • Medium 5.1
    CVE-2025-49082

    Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

    CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperl…

    Absolute Security Secure Access
  • Medium 5.1
    CVE-2025-54085

    Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

    CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperl…

    Absolute Security Secure Access

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-23216, EUVD-2025-23215, EUVD-2025-23214, EUVD-2025-23218

  2. #1

    Initiale Fassung

References