Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Elevation of privilege in Absolute Secure Access clients and servers
Vulnerability Description
There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access and valid desktop user credentials can elevate their privilege to system level by passing invalid address data to the vulnerable component. This could be used to manipulate process tokens to elevate the privilege of a normal process to System. The scope is changed, the impact to system confidentiality and integrity is high, the impact to the availability of the effected component is none.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
非可信指针解引用
Vulnerability Title
Absolute Secure Access 安全漏洞
Vulnerability Description
Absolute Secure Access是Absolute公司的一款应用程序。以提供针对混合和移动工作模式优化的安全服务边缘（SSE）。 Absolute Secure Access 13.07之前版本存在安全漏洞，该漏洞源于服务器和客户端组件中存在特权提升漏洞，从而导致攻击者可操纵进程令牌以将正常进程的特权提升到System。
CVSS Information
N/A
Vulnerability Type
N/A