CVE-2025-49083 is a vulnerability in the management console
of Absolute Secure Access after version 12.00 and prior to version 13.56.
Attackers with administrative access to the console can cause unsafe content to
be deserialized and executed in the security context of the console. The attack
complexity is low and there are no attack requirements. Privileges required are
high and there is no user interaction required. The impact to confidentiality
is low, impact to integrity is high and there is no impact to availability. The
impact to the confidentiality and integrity of subsequent systems is low and
there is no subsequent system impact to availability.
References
| Link | Resource |
|---|---|
| https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49083 | Vendor Advisory |
Configurations
History
05 Aug 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Absolute secure Access
Absolute |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| CPE | cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:* | |
| References | () https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49083 - Vendor Advisory |
31 Jul 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-31 00:15
Updated : 2025-08-05 20:16
NVD link : CVE-2025-49083
Mitre link : CVE-2025-49083
JSON object : View
Products Affected
absolute
- secure_access
CWE
No CWE.