Excess Permissions Vulnerability in Absolute Secure Access Warehouse Component

CVE-2025-54086

What is CVE-2025-54086?

The excess permissions vulnerability in the Warehouse component of Absolute Secure Access allows attackers with local file system access to read the sensitive Java keystore file. This vulnerability poses a low complexity risk, requiring minimal privileges and no user interaction. Although the impact on confidentiality is narrowed, it is crucial for users to address this issue due to potential exposure of sensitive data.

References