Privilege Escalation Vulnerability in Absolute Secure Access Management Console
CVE-2025-27703
7HIGH
What is CVE-2025-27703?
This vulnerability enables attackers with administrative access to certain privileged features in the Absolute Secure Access management console to elevate their permissions, allowing them to access additional functionalities within the same console. The attack can be executed with low complexity, does not require any pre-existing conditions, and necessitates high privileges. Although the confidentiality impact on the system is minimal, the potential to compromise system integrity is significant, while availability remains largely unaffected.
Affected Version(s)
Secure Access 0 < 13.54
References
CVSS V4
Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
