Description
In Secure Access 12.70 and prior to 14.20, the logging
subsystem may write an unredacted authentication token to logs under
certain configurations. Any party with access to those logs could read
the token and reuse it to access an integrated system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Absolute Security | Secure Access | 12.70 – < 14.20 | 14.20 |
Advisories 1
- WID-SEC-2026-0104 Absolute Secure Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2026