CVE-2024-37346

MEDIUM

Absolute Secure Access < 13.06 - Authenticated Denial of Service via Warehouse Invalid Data

Title source: llm

Description

There is an insufficient input validation vulnerability in the Warehouse component of Absolute Secure Access prior to 13.06. Attackers with system administrator permissions can impair the availability of certain elements of the Secure Access administrative UI by writing invalid data to the warehouse over the network. There is no loss of warehouse integrity or confidentiality, the security scope is unchanged. Loss of availability is high.

References (1)

Core 1

Core References

Vendor Advisory

https://www.absolute.com/platform/security-information/vulnerability-archive/secure-access-1306/cve-2024-37346/

Scores

CVSS v3 4.9

EPSS 0.0040

EPSS Percentile 31.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (1)

absolute/secure_access < 13.06

Published Jun 20, 2024

Tracked Since Feb 18, 2026