4.6

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging 
subsystem may write an unredacted authentication token to logs under 
certain configurations. Any party with access to those logs could read 
the token and reuse it to access an integrated system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Absolute ≫ Secure Access Version >= 12.70 < 14.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.041
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.4 0.8 2.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
SecurityResponse@netmotionsoftware.com 4.6 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-532 Insertion of Sensitive Information into Log File

The product writes sensitive information to a log file.