Skip to content
OpenAdvisories
High · 8.6 CVE-2024-3826 EUVD-2024-32396GHSA-4rh6-83qm-cfmj

Broken SAML Validation

Published Jul 2, 2024 · Updated Aug 14, 2024 · Assigned by Perforce

Vendor: Akana Product: Akana API Platform

Description

In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.

Affected products

VendorProductAffectedFixed
Akana Akana API Platform 2022.1.1 – < 2022.1.1 (CVE-2024-3826 Patch), 2022.1.2 – < 2022.1.2 (CVE-2024-3826 Patch), 2022.1.3 – < 2022.1.3 (CVE-2024-3826 Patch), 0.0.0 – < 2024.1.0 2022.1.1 (CVE-2024-3826 Patch)

References