CVE-2024-5249

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:perforce:akana_api:*:*:*:*:*:*:*:*

History

01 Oct 2024, 14:26

Type Values Removed Values Added
CPE cpe:2.3:a:perforce:akana_api:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Perforce
Perforce akana Api
References () https://portal.perforce.com/s/detail/a91PA000001SUH7YAO - () https://portal.perforce.com/s/detail/a91PA000001SUH7YAO - Vendor Advisory
CWE CWE-294

31 Jul 2024, 12:57

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-30 19:15

Updated : 2024-10-01 14:26


NVD link : CVE-2024-5249

Mitre link : CVE-2024-5249


JSON object : View

Products Affected

perforce

  • akana_api
CWE
CWE-294

Authentication Bypass by Capture-replay