EAA Client Escalation of Privilege Vulnerability on Windows

This post covers the details of CVE-2021-40683 CVSS 6.5, the vulnerability impacting the Akamai Enterprise Application Access EAA Client running on Windows systems, for which Akamai has provided a patch to its customers...

CVE-2021-40683

The CVE-2021-40683 issue affects Akamai EAA Client on Windows prior to patches addressing unquoted path handling that could hijack the flow of execution. Affected versions include 2.3.1 and 2.4.x before 2.4.1, and 2.5.x before 2.5.3. The vulnerability, described across multiple sources, indicates...