CVE-2024-37345
CVSS V2 None
CVSS V3 None
Description
There is a cross-site scripting vulnerability in the Secure
Access administrative UI of Absolute Secure Access prior to version 13.06.
Attackers can pass a limited-length script to the administrative UI which is
then stored where an administrator can access it. The scope is unchanged, there
is no loss of confidentiality. Impact to system availability is none, impact to
system integrity is high
Overview
- CVE ID
- CVE-2024-37345
- Assigner
- Absolute
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-06-20T16:45:51.929Z
- Last Modified Date
- 2024-06-20T16:45:51.929Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1306/cve-2024-37345/ |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-37345 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37345 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 01:24:28 | Added to TrackCVE |