Skip to content
OpenAdvisories
High · 7.0 CVE-2025-27703 EUVD-2025-16357GHSA-c3vv-fgcp-2m26

Privilege escalation in the management console of Absolute Secure Access prior to version 13.54

Published May 28, 2025 · Updated May 28, 2025 · Assigned by Absolute

Description

CVE-2025-27703 is a privilege escalation vulnerability in the management
console of Absolute Secure Access prior to version 13.54. Attackers
with administrative access to a specific subset of privileged features
in the console can elevate their permissions to access additional
features in the console. The attack complexity is low, there are no
preexisting attack requirements; the privileges required are high, and
there is no user interaction required. The impact to system
confidentiality is low, the impact to system integrity is high and the
impact to system availability is low.

Affected products

VendorProductAffectedFixed
Absolute Security Secure Access < 13.54 13.54

References