CVE-2024-5249 - CVE House
Back to Database
Status published Medium CVE-2024-5249

SAML Replay in Akana

Vulnerability Description

In versions of Akana API Platform prior to 2024.1.0, SAML tokens can be replayed.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-5249

Credits & Attribution

No credits recorded in the NVD database.

References

More from Akana

View All →
CVE-2024-5250
Overly Verbose Errors in SAML Integration
Low 3.5
CVE-2024-3930
XML External Entity in Akana
Medium 6.3
CVE-2024-3826
Broken SAML Validation
High 8.6
CVE-2024-2796
SSRF in Akana API Platform
Critical 9.3

Affected Vendor

Affected Software

Akana API Platform
Vulnerable Versions:
0.0.0

Timeline

Official Publish: July 30th, 2024
Last Modified: January 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

CWE-294

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.