Absolute Secure Access Server-Side Request Forgery Vulnerability

A server-side request forgery vulnerability has been identified in Absolute Secure Access versions prior to 14.10. This vulnerability allows attackers with administrative privileges to send a crafted test HTTP request from the Secure Access server. The exploitation of this vulnerability requires user interaction and has a high attack complexity. While there is no direct impact on confidentiality, integrity, or availability, there is a low severity subsequent system impact on integrity.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the Secure Access server, potentially allowing for manipulation of server-side resources or data.