Lucene search

AbsoluteCVE-2024-37349

HistoryJun 20, 2024 - 6:15 p.m.

CVE-2024-37349

2024-06-2018:15:11

CWE-79

Absolute

web.nvd.nist.gov

cross-site scripting

absolute secure access

version 13.06

system administrator

management ui

cve-2024-37349

confidentiality

integrity

availability

CVSS3

4.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

14.7%

JSON

There is a cross-site scripting vulnerability in the
management UI of Absolute Secure Access prior to version 13.06. Attackers with
system administrator permissions can interfere with other system
administrator’s use of the management UI when the victim administrator edits
the same management object. This vulnerability is distinct from CVE-2024-37348 and
CVE-2024-37351. The scope is unchanged, there is no loss of confidentiality. Impact
to system integrity is high, impact to system availability is none.

Affected configurations

Nvd

Node

absolutesecure_accessRange<13.06

VendorProductVersionCPE
absolutesecure_access*cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
absolute	secure_access	*	cpe:2.3:a:absolute:secure_access::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Secure Access",
    "vendor": "Absolute Software",
    "versions": [
      {
        "lessThan": "13.06",
        "status": "affected",
        "version": "0",
        "versionType": "Server"
      }
    ]
  }
]

References

www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1306/cve-2024-37349/

CVSS3

4.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

AI Score

4.3

Confidence

High

EPSS

Percentile

14.7%

JSON

Related for CVE-2024-37349