PT-2025-40420 · Unknown · Absolute Secure Access

Published 2025-10-02 · Updated 2025-10-16 · CVE-2025-54086

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 14.10

Description An excess permissions issue exists within the Warehouse component. An attacker who has access to the local file system can read the Java keystore file. The attack complexity is low, and no specific requirements or user interaction are needed. The confidentiality impact is low, with no impact to integrity or availability.

Recommendations Update to version 14.10 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-54086

Affected Products

Absolute Secure Access

References · 7

• https://absolute.com/platform/security-information/vulnerability-archive/cve-2025-54086 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54086 · Security Note
• https://twitter.com/CVEnew/status/1973844586649850364 · Twitter Post
• https://t.me/CVEtracker/33974 · Telegram Post
• https://t.me/cveNotify/137555 · Telegram Post
• https://t.me/cveNotify/139031 · Telegram Post