cve/2024/CVE-2024-40873.md
2024-08-25 17:33:10 +00:00

1.0 KiB
Raw Blame History

CVE-2024-40873

Description

There is a cross-site scripting vulnerability in the SecureAccess administrative console of Absolute Secure Access prior to version 13.07.Attackers with system administrator permissions can interfere with anothersystem administrators use of the publishing UI when the administrators areediting the same management object. The scope is unchanged, there is no loss ofconfidentiality. Impact to system availability is none, impact to systemintegrity is high.

POC

Reference

No PoCs from references.

Github