Privilege escalation in the management console of Absolute Secure Access prior to version 13.54

CVE-2025-27703 is a privilege escalation vulnerability in the management

console of Absolute Secure Access prior to version 13.54. Attackers

with administrative access to a specific subset of privileged features

in the console can elevate their permissions to access additional

features in the console. The attack complexity is low, there are no

preexisting attack requirements; the privileges required are high, and

there is no user interaction required. The impact to system

confidentiality is low, the impact to system integrity is high and the

impact to system availability is low.