Lucene search

PerforceVULNRICHMENT:CVE-2024-5250

HistoryJul 30, 2024 - 6:29 p.m.

CVE-2024-5250 Overly Verbose Errors in SAML Integration

2024-07-3018:29:11

CWE-209

Perforce

github.com

akana api platform

cve-2024-5250

saml integration

overly verbose errors

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.4%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

CNA Affected

[
  {
    "vendor": "Akana",
    "product": "Akana API Platform",
    "versions": [
      {
        "status": "affected",
        "version": "0.0.0",
        "lessThan": "2024.1.0",
        "versionType": "SEM"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

portal.perforce.com/s/detail/a91PA000001SUIjYAO

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.4%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-5250