PT-2025-31454 · Unknown · Absolute Secure Access

Published 2025-07-30 · Updated 2025-08-05 · CVE-2025-49082

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 13.56

Description The issue allows attackers with administrative access to the management console and specific permissions to bypass permission restrictions and read other settings. The attack complexity is low, requiring high privileges and no user interaction. The impact on system confidentiality is low, with no impact on system availability or integrity.

Recommendations Update Absolute Secure Access to version 13.56 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-49082

Affected Products

Absolute Secure Access

References · 8

• https://osv.dev/vulnerability/CVE-2025-49082 · Vendor Advisory
• https://absolute.com/platform/security-information/vulnerability-archive/cve-2025-49082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49082 · Security Note
• https://t.me/CVEtracker/28800 · Telegram Post
• https://twitter.com/CVEnew/status/1950727420371472511 · Twitter Post
• https://t.me/cveNotify/130386 · Telegram Post
• https://t.me/cveNotify/130989 · Telegram Post
• https://t.me/cveNotify/130337 · Telegram Post