Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Secure Access versions prior to 14.10 can redirect users to fake sites

CVE-2025-54088 · published 1 year ago
Summary

Attackers with console access to Secure Access can trick users into visiting unauthorized websites. If you use Secure Access version 14.10 or earlier, update to the latest version to protect your users. This vulnerability is relatively easy to exploit, but fixes are available.

What to do
  • Update absolute secure_access to version 14.10 or later.
Affected software
VendorProductAffected versions
absolute secure_access < 14.10
cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*
Original advisory text
CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low...
CVE-2025-54088 is an open-redirect vulnerability in Secure
Access prior to version 14.10. Attackers with access to the console can
redirect victims to an arbitrary URL. The attack complexity is low, attack
requirements are present, no privileges are required, and users must actively
participate in the attack. Impact to confidentiality is low and there is no
impact to integrity or availability. There are high severity impacts to
confidentiality, integrity, availability in subsequent systems.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-601Open Redirect
Timeline
Published2 Oct 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-54088 · NVD
Track software like this
Free during beta