CVE-2025-24527CWE-732

An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17

High · published January 29, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-01-29T00:00Z
EPSS history
Timeline
  • 29 JAN 00:00Z
    An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17
    cvelistv5