Lucene search

K
nvd[email protected]NVD:CVE-2024-40873
HistoryJul 25, 2024 - 6:15 p.m.

CVE-2024-40873

2024-07-2518:15:03
CWE-79
web.nvd.nist.gov
6
cross-site scripting
absolute secure access
system integrity

CVSS3

3.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

EPSS

0

Percentile

14.0%

There is a cross-site scripting vulnerability in the Secure
Access administrative console of Absolute Secure Access prior to version 13.07.
Attackers with system administrator permissions can interfere with another
system administrator’s use of the publishing UI when the administrators are
editing the same management object. The scope is unchanged, there is no loss of
confidentiality. Impact to system availability is none, impact to system
integrity is high.

Affected configurations

Nvd
Node
absolutesecure_accessRange<13.07
VendorProductVersionCPE
absolutesecure_access*cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*

CVSS3

3.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

EPSS

0

Percentile

14.0%

Related for NVD:CVE-2024-40873