CVE-2025-54086 - CVE House
Back to Database
Status published Medium CVE-2025-54086

Excess Permissions in Warehouse

Vulnerability Description

CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is low, there are no attack requirements, the privileges required are low and no user interaction is required. Impact to confidentiality is low, there is no impact to integrity or availability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54086

Credits & Attribution

No credits recorded in the NVD database.

References

More from Absolute Security

View All →
CVE-2025-59596
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client...
Medium 6
CVE-2025-54089
Cross-site Scripting vulnerability in Secure Access prior to 14.10
Medium 4.6
CVE-2025-54088
Open Redirect in Secure Access prior to 14.10
Medium 5.5
CVE-2025-54087
Server-side request forgery in Secure Access
Low 1.8
CVE-2025-54085
Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Medium 5.1

Affected Vendor

Absolute Security

View all reports →

Affected Software

Secure Access
Vulnerable Versions:
0

Timeline

Official Publish: October 2nd, 2025
Last Modified: October 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.