CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-5249: SAML Replay in Akana

5.4 CVSS

Description

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

Classification

CVE ID: CVE-2024-5249

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.4

Affected Products

Vendor: Akana

Product: Akana API Platform

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 20.07% (scored less or equal to compared to others)

EPSS Date: 2025-02-07 (when was this score calculated)

References

https://portal.perforce.com/s/detail/a91PA000001SUH7YAO

Timeline