CVE-2025-54568

Summary

Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node.

Affected Software

Weaknesses

• CWE-684: CWE-684 Incorrect Provision of Specified Functionality

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/geo-chen/Akamai/blob/main/Edge%20Hopping.md
• http://techdocs.akamai.com/app-api-protector/docs/improved-rate-accounting

• ←Previous
• Next→