CVERadar

CVE-2024-5249

High Severity

SVRS

42/100

CVSSv3

7.5/10

EPSS

0.00077/1

CVE-2024-5249 exposes Akana API Platform users to SAML token replay attacks, allowing unauthorized access. Prior to version 2024.1.0, the platform fails to adequately prevent the reuse of SAML tokens. This vulnerability, classified as CWE-294 (Improper Check of Certificate Validity), carries a CVSS score of 7.5. While SOCRadar's Vulnerability Risk Score (SVRS) is 42, indicating a moderate risk, the fact it is tagged as "In The Wild" means active exploitation is possible. Successful exploitation allows attackers to impersonate legitimate users, potentially leading to data breaches and unauthorized actions within the Akana API Platform. Users should upgrade to version 2024.1.0 or later immediately to mitigate this security risk. Even though the SVRS isn't critical, its real-world exploitability makes patching urgent.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence

Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.

CREATE FREE ACCOUNT

CVE Details

Access comprehensive CVE information instantly

Real-time Tracking

Subscribe to CVEs and get instant updates

Exploit Analysis

Monitor related APT groups and threats

IOC Tracking

Analyze and track CVE-related IOCs

News

CVE-2024-5249 | Akana API Platform prior 2024.1.0 SAML Token authentication replay

vuldb.com2024-07-30

CVE-2024-5249 | Akana API Platform prior 2024.1.0 SAML Token authentication replay | A vulnerability was found in Akana API Platform. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SAML Token Handler. The manipulation leads to authentication bypass by capture-replay. This vulnerability is handled as CVE-2024-5249. The attack may be launched remotely. There

cve-2024-5249

domains

urls

cves

Social Media

CVE

@CVEnew

2024-07-30

CVE-2024-5249 In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed. https://t.co/JuKMCvuhm2

Affected Software

No affected software found for this CVE

References

Reference	Link
[email protected]	https://portal.perforce.com/s/detail/a91PA000001SUH7YAO

CWE Details

CWE ID	CWE Name	Description
CWE-294	Authentication Bypass by Capture-replay	A capture-replay flaw exists when the design of the software makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence