Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52

There is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.52. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are high, user interaction required is none. The impact to confidentiality is none, the impact to availability is low, and the impact to system integrity is high.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Absolute Secure Access 跨站脚本漏洞

Absolute Secure Access是Absolute公司的一款应用程序。以提供针对混合和移动工作模式优化的安全服务边缘（SSE）。 Absolute Secure Access 13.52之前版本存在跨站脚本漏洞。攻击者利用该漏洞可以干扰另一个系统管理员对管理控制台的使用。

N/A

N/A