CVE-2024-3826

Summary

In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.

Affected Software

VendorProductVersion RangeStatus
AkanaAkana API Platform2022.1.1 < 2022.1.1 (CVE-2024-3826 Patch)affected
AkanaAkana API Platform2022.1.2 < 2022.1.2 (CVE-2024-3826 Patch)affected
AkanaAkana API Platform2022.1.3 < 2022.1.3 (CVE-2024-3826 Patch)affected
AkanaAkana API Platform0.0.0 < 2024.1.0affected

Weaknesses

  • CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References