N/A

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in. Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Absolute Secure Access 安全漏洞

Absolute Secure Access是Absolute公司的一款应用程序。以提供针对混合和移动工作模式优化的安全服务边缘（SSE）。 Absolute Secure Access 13.53之前版本存在安全漏洞，该漏洞源于Secure Access管理控制台中的跨站脚本漏洞，可能导致具有系统管理员权限的攻击者在第二个管理员登录时干扰其使用管理控制台。

N/A

N/A