PT-2025-25342 · Unknown · Absolute Secure Access

Published 2025-06-12 · Updated 2025-06-12 · CVE-2025-49081

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.55

Description The issue is related to insufficient input validation in the warehouse component. Attackers with system administrator permissions can impair the availability of the Secure Access administrative UI by writing invalid data to the warehouse over the network. The attack complexity is low, and there are no attack requirements or user interaction needed, but high privileges are required. The impact on confidentiality and integrity is none, while the impact on availability is high.

Recommendations For versions prior to 13.55, update to version 13.55 or later to resolve the issue. As a temporary workaround, consider restricting access to the warehouse component to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-49081

Affected Products

Absolute Secure Access

References · 7

• https://absolute.com/platform/security-information/vulnerability-archive/cve-2025-49081 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49081 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49081 · Vendor Advisory
• https://t.me/cvenotify/125535 · Telegram Post
• https://t.me/cvetracker/26115 · Telegram Post
• https://twitter.com/CVEnew/status/1933216511969083510 · Twitter Post
• https://t.me/latest_high_impact_cve/2631 · Telegram Post