Elevation of Privilege Vulnerability Affects Server and Client Components

CVE-2024-40872

What is CVE-2024-40872?

An elevation of privilege vulnerability exists in both the server and client components of Absolute Secure Access prior to version 13.07. This vulnerability can be exploited by attackers who have local access and possess valid desktop user credentials, allowing them to pass invalid address data to the vulnerable component. Through this method, attackers can manipulate process tokens, elevating the privilege of a standard process to system level. As a result, there are significant implications for system confidentiality and integrity.

References