High severity · published Jul 2, 2024
CVE-2024-3826
Broken SAML Validation
8.6
CVSS
0.3%
EPSS
No
On KEV
Description
In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Akana API Platform · Akana
2022.1.1 before 2022.1.1 (CVE-2024-3826 Patch); 2022.1.2 before 2022.1.2 (CVE-2024-3826 Patch); 2022.1.3 before 2022.1.3 (CVE-2024-3826 Patch); 0.0.0 before 2024.1.0 · source: vendor
AK
Akana · Akana
2022.1.1 before 2022.1.1 (Patch); 2022.1.2 before 2022.1.2 (Patch); 2022.1.3 before 2022.1.3 (Patch); 0.0.0 before 2024.1.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-3826
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-3826
portal.perforce.com
https://portal.perforce.com/s/detail/a91PA000001SUAfYAO
More from Akana API Platform
9.8
CVE-2024-3930
XML External Entity in Akana
9.3
CVE-2024-2796
SSRF in Akana API Platform
7.5
CVE-2024-5249
SAML Replay in Akana
5.3
CVE-2024-5250
Overly Verbose Errors in SAML Integration