logo_clicknbuy.png

CVE-2025-49083 – Absolute Secure Access Console Deserialization Vulnerability

The following table lists the changes that have been made to the
CVE-2025-49083 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jul. 31, 2025

    Action Type Old Value New Value
    Added Description CVE-2025-49083 is a vulnerability in the management console
    of Absolute Secure Access after version 12.00 and prior to version 13.56.
    Attackers with administrative access to the console can cause unsafe content to
    be deserialized and executed in the security context of the console. The attack
    complexity is low and there are no attack requirements. Privileges required are
    high and there is no user interaction required. The impact to confidentiality
    is low, impact to integrity is high and there is no impact to availability. The
    impact to the confidentiality and integrity of subsequent systems is low and
    there is no subsequent system impact to availability.
    Added CVSS V4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    Added Reference https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49083
Share the Post:

Related Posts