CVE-2026-0519

LOW

3.4

Description

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system.

CVE Details

CVSS v3.1 Score3.4

SeverityLOW

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published1/17/2026

Last Modified2/2/2026

Sourcenvd

Honeypot Sightings0

Affected Products

absolute:secure_access

Weaknesses (CWE)

CWE-532

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0519(SecurityResponse@netmotionsoftware.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.