CVE-2024-40875
Severity CVSS v4.0:
MEDIUM
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
20/12/2024
Last modified:
20/12/2024
Description
There is a cross-site scripting vulnerability in the<br />
management console of Absolute Secure Access prior to version 13.52. Attackers<br />
with system administrator permissions can interfere with another system<br />
administrator’s use of the management console when the second administrator logs<br />
in. Attack complexity is high, attack requirements are present, privileges<br />
required are high, user interaction required is none. The impact to<br />
confidentiality is none, the impact to availability is low, and the impact to<br />
system integrity is high.
Impact
Base Score 4.0
5.90
Severity 4.0
MEDIUM