PT-2025-23123 · Unknown · Absolute Secure Access

Published 2025-05-28 · Updated 2025-06-04 · CVE-2025-27702

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.54

Description The issue allows attackers with administrative access to the management console and specific permissions to bypass those permissions, improperly modifying settings. The attack complexity is low, with no preexisting attack requirements, high privileges required, and no user interaction needed. There is no impact to system confidentiality or availability, but the impact to system integrity is high.

Recommendations For versions prior to 13.54, update to version 13.54 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to the management console and limiting permissions to minimize the risk of exploitation.

Fix

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-27702

Affected Products

Absolute Secure Access

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-27702 · Security Note
• https://absolute.com/platform/vulnerability-archive/cve-2025-27702 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27702 · Vendor Advisory
• https://t.me/cvenotify/123938 · Telegram Post
• https://twitter.com/dailycve/status/1930318494693830878 · Twitter Post
• https://twitter.com/CVEnew/status/1927830334391070977 · Twitter Post
• https://t.me/cvetracker/24866 · Telegram Post