Server-Side Request Forgery Vulnerability in Secure Access by Absolute Software

CVE-2025-54087

What is CVE-2025-54087?

This vulnerability manifests within Absolute Software's Secure Access, where an attacker with administrative privileges can exploit the system by publishing specially crafted HTTP requests originating from the Secure Access server itself. While the attack involves high complexity, it does not require specific prerequisites, but does necessitate user interaction. The vulnerability poses a potential risk to the integrity of the system, although it does not directly compromise confidentiality or availability.

References