Absolute Secure Access Elevation of Privilege Vulnerability in Management Console

An elevation of privilege vulnerability has been identified in the management console of Absolute Secure Access, affecting versions prior to 13.56. This vulnerability allows attackers with administrative access to overwrite policy rules without the necessary permissions. The vulnerability has a low attack complexity, requires high privileges, and does not involve user interaction. While there is no impact on confidentiality or availability, the vulnerability could significantly affect the confidentiality and availability of subsequent systems, with a low impact on their integrity.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of policy rules, potentially allowing for further exploitation or misconfiguration of the Absolute Secure Access environment.