CVE-2026-0519

Medium CVSS: 4.6

In Secure Access 12.70 and prior to 14.20, the logging
subsystem may write an unredacted authentication token to logs under
certain configurations. Any party with access to those logs could read
the token and reuse it to access an integrated system.

Vendor

Absolute

Product

Secure Access

CWE

CWE-532

Yayın Tarihi

2026-01-17 02:15:49

Güncelleme

2026-02-02 16:04:56

Source Identifier

SecurityResponse@netmotionsoftware.com

KEV Date Added

Kategoriler

CWE-532 Secure Access MEDIUM Absolute 2026

Referanslar

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0519

Benzer Kayıtlar

Medium

CVE-2026-0518

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with adm…

Medium

CVE-2026-0517

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can…

High

CVE-2025-59595

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.…

Medium

CVE-2025-59596

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addr…

Medium

CVE-2025-54088

CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the c…

Medium

CVE-2025-54089

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with admin…