Management Console Vulnerability in Absolute Secure Access

CVE-2025-54085

What is CVE-2025-54085?

A permissions bypass vulnerability exists in the management console of Absolute Secure Access versions prior to 13.56. This flaw allows attackers with administrative access and specific permissions to circumvent those permissions, enabling unauthorized reading or modification of other settings. The vulnerability can be exploited with low attack complexity and does not require user interaction, making it a potential risk to system confidentiality and integrity.

References