CVE-2025-49082 - CVE House
Back to Database
Status published Medium CVE-2025-49082

Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

Vulnerability Description

CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly read other settings. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. The impact to system confidentiality is low, there is no impact to system availability or integrity.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-49082

Credits & Attribution

No credits recorded in the NVD database.

References

More from Absolute Security

View All →
CVE-2025-59596
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client...
Medium 6
CVE-2025-54089
Cross-site Scripting vulnerability in Secure Access prior to 14.10
Medium 4.6
CVE-2025-54088
Open Redirect in Secure Access prior to 14.10
Medium 5.5
CVE-2025-54087
Server-side request forgery in Secure Access
Low 1.8
CVE-2025-54086
Excess Permissions in Warehouse
Medium 5.3

Affected Vendor

Absolute Security

View all reports →

Affected Software

Secure Access
Vulnerable Versions:
0

Timeline

Official Publish: July 30th, 2025
Last Modified: July 31st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.