PT-2025-40421

CVE-2025-54087

·

Published

2025-10-02

·

Updated

2025-10-16

Description by

CVSS 3.1
2.6
Low
MetricsAV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Secure Access versions prior to 14.10
Description A server-side request forgery condition exists in Secure Access. Individuals with administrative rights can submit a specially designed HTTP request from the Secure Access server. The attack requires user interaction and has a high complexity. There is no direct impact to confidentiality, integrity, or availability, but there is a low severity subsequent system impact to integrity.
Recommendations Update to version 14.10 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾