PT-2025-31455 · Absolute · Absolute Secure Access

Published 2025-07-30 · Updated 2025-08-05 · CVE-2025-49083

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions 12.01 through 13.55

Description The management console of Absolute Secure Access is susceptible to an issue where attackers possessing administrative privileges can trigger the deserialization and execution of unsafe content within the console's security context. The attack requires low complexity and no user interaction. The confidentiality impact is low, while the integrity impact is high. The confidentiality and integrity of subsequent systems are also potentially impacted, but availability remains unaffected.

Recommendations Update Absolute Secure Access to version 13.56 or later.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-49083

Affected Products

Absolute Secure Access

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-49083 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49083 · Vendor Advisory
• https://absolute.com/platform/security-information/vulnerability-archive/cve-2025-49083 · Vendor Advisory
• https://t.me/cveNotify/130990 · Telegram Post
• https://twitter.com/CVEnew/status/1950706608079605891 · Twitter Post
• https://t.me/cveNotify/130338 · Telegram Post
• https://t.me/CVEtracker/28801 · Telegram Post