Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3826

July 2, 2024, 5:44 p.m.

Product(s) Impacted

Akana

In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionality.

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

CWE ID: 287

Published: July 2, 2024, 4:15 p.m.

Last Modified: July 2, 2024, 5:44 p.m.

CVE has been recently published to the CVE List and has been received by the NVD.

More info

security@puppet.com