Absolute Security Secure Access server flaw lets attackers add accounts
Secure Access server admins can be tricked into creating attacker accounts!
Summary
Absolute Security's Secure Access server, version 14.60, has a forged-request flaw. A bypassed security control lets an attacker trick an admin into creating an account under their control.
What to do
Check that you run a version newer than 14.60 and read the vendor's advisory. The sources name no fixed version.
Products and platforms
CVE IDs
Times
First published
First seen