Description (CNA)
In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Absolute Security / Secure Access | affected 12.70 before 14.20 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.