Auth bypass in Akana Api Platform

CVE-2024-3826

In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.

Vulnerability class: Broken Authentication

EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References