Absolute Secure Access Elevation of Privilege Vulnerability in Management Console

An elevation of privilege vulnerability has been identified in the management console of Absolute Secure Access, affecting versions prior to 13.56. This vulnerability allows attackers with administrative access and specific permissions to bypass those permissions and improperly read or modify other settings. The vulnerability has a low attack complexity, requires high privileges, and does not involve user interaction. While the impact on system confidentiality and integrity is low, there is no effect on system availability.

Impact

Exploitation of this vulnerability could lead to unauthorized reading or modification of settings within the management console, allowing attackers to bypass assigned permissions.