Absolute Secure Access Cross-Site Scripting Vulnerability in Management Console

A cross-site scripting vulnerability has been identified in the management console of Absolute Secure Access, affecting versions prior to 13.54. This vulnerability allows attackers with system administrator permissions to disrupt the activities of another system administrator in the console, but only when the targeted administrator is actively viewing the page. The vulnerability has a low attack complexity, requires high privileges, and necessitates active user interaction.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.