EAA Client Escalation of Privilege Vulnerability on Windows

This post covers the details of CVE-2021-40683 CVSS 6.5, the vulnerability impacting the Akamai Enterprise Application Access EAA Client running on Windows systems, for which Akamai has provided a patch to its customers...

CVE-2021-40683

In Akamai EAA Enterprise Application Access Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution...

CVE-2021-40683

In Akamai EAA Enterprise Application Access Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution...

PT-2021-22942

Name of the Vulnerable Software and Affected Versions Akamai EAA Client versions prior to 2.3.1 Akamai EAA Client versions 2.4.x prior to 2.4.1 Akamai EAA Client versions 2.5.x prior to 2.5.3 Description An unquoted path in the Akamai EAA Client may allow an attacker to hijack the flow of...

Enterprise Application Access Client (EAA) Vulnerability (CVE-2019-18847)

On October 15, 2019, Tesla discovered, and responsibly disclosed, a vulnerability within Akamai's Enterprise Application Access EAA client that allows privilege escalation and remote code execution RCE when an attacker is within privileged locations on a network. This vulnerability has been...