PT-2025-40420
CVE-2025-54086
·
Published
2025-10-02
·
Updated
2025-10-16
Description by
CVSS 4.0
5.3
MediumMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions
Absolute Secure Access versions prior to 14.10
Description
An excess permissions issue exists within the Warehouse component. An attacker who has access to the local file system can read the Java keystore file. The attack complexity is low, and no specific requirements or user interaction are needed. The confidentiality impact is low, with no impact to integrity or availability.
Recommendations
Update to version 14.10 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾