CVE-2024-45164: High severity akamai secure internet access enterprise threatavert vulnerability
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticated user can navigate directly to the /#app/intelligence/threatAvertPolicies URI and disable policy enforcement.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45164?
The severity of CVE-2024-45164 is classified as high due to incorrect authorization controls.
How do I fix CVE-2024-45164?
To fix CVE-2024-45164, upgrade to Akamai Secure Internet Access Enterprise ThreatAvert version 19.2.0.3 or later.
What are the potential impacts of CVE-2024-45164?
Potential impacts of CVE-2024-45164 include unauthorized access to admin functionalities, which can compromise security policies.
Which software versions are affected by CVE-2024-45164?
Akamai Secure Internet Access Enterprise ThreatAvert versions before 19.2.0.3 are affected by CVE-2024-45164.
Is there a workaround for CVE-2024-45164?
There are no documented workarounds for CVE-2024-45164; immediate patching is recommended.