Absolute Secure Access Open-Redirect Vulnerability

An open-redirect vulnerability has been identified in Absolute Secure Access versions prior to 14.10. This vulnerability allows attackers with access to the administrative console to redirect users to arbitrary URLs. The attack complexity is low, requires user participation, and no special privileges are needed. While the vulnerability has a low impact on confidentiality, integrity, and availability, it can lead to high-severity impacts on subsequent systems.

Impact

Exploitation of this vulnerability allows for open redirection, potentially leading to phishing attacks or the distribution of malware. Additionally, according to Absolute, this vulnerability could have high-severity impacts on confidentiality, integrity, and availability in subsequent systems.