CVE-2025-54086: Excess Permissions in Warehouse
CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is low, there are no attack requirements, the privileges required are low and no user interaction is required. Impact to confidentiality is low, there is no impact to integrity or availability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Absolute Secure Access Warehouseto a version that resolves this vulnerability.Fixed in 14.10
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54086?
CVE-2025-54086 is classified as a low-severity vulnerability.
How do I fix CVE-2025-54086?
To mitigate CVE-2025-54086, upgrade to Absolute Secure Access version 14.10 or later.
What impact does CVE-2025-54086 have on affected systems?
CVE-2025-54086 allows attackers with local file system access to read sensitive Java keystore files.
Who is affected by CVE-2025-54086?
CVE-2025-54086 affects users of Absolute Secure Access versions prior to 14.10.
What is the attack complexity for CVE-2025-54086?
The attack complexity for exploiting CVE-2025-54086 is considered low.