CVE-2024-40873

CVSS V2 None CVSS V3 None
Description
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.07. Attackers with system administrator permissions can interfere with another system administrator’s use of the publishing UI when the administrators are editing the same management object. The scope is unchanged, there is no loss of confidentiality. Impact to system availability is none, impact to system integrity is high.
Overview
  • CVE ID
  • CVE-2024-40873
  • Assigner
  • Absolute
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-07-25T17:19:28.906Z
  • Last Modified Date
  • 2024-07-25T17:44:19.838Z
History
Created Old Value New Value Data Type Notes
2024-07-26 13:02:53 Added to TrackCVE