Lucene search

PerforceCVE-2024-5250

HistoryJul 30, 2024 - 7:15 p.m.

CVE-2024-5250

2024-07-3019:15:11

CWE-209

Perforce

web.nvd.nist.gov

cve-2024-5250

akana api platform

saml integration

overly verbose errors

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

9.4%

JSON

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

Affected configurations

Nvd

Node

perforceakana_apiRange<2024.1.0

VendorProductVersionCPE
perforceakana_api*cpe:2.3:a:perforce:akana_api:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
perforce	akana_api	*	cpe:2.3:a:perforce:akana_api::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Akana API Platform",
    "vendor": "Akana",
    "versions": [
      {
        "lessThan": "2024.1.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "SEM"
      }
    ]
  }
]

References

portal.perforce.com/s/detail/a91PA000001SUIjYAO

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

9.4%

JSON

Related for CVE-2024-5250