CVE-2025-24527: High severity akamai enterprise application access vulnerability
An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenant's 128-bit connector GUID, they can execute debug commands on that connector.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24527?
CVE-2025-24527 is considered a high severity vulnerability due to the risk of unauthorized debug command execution on a tenant's connector.
How do I fix CVE-2025-24527?
To fix CVE-2025-24527, upgrade Akamai Enterprise Application Access to version 2025-01-17 or later.
Who is affected by CVE-2025-24527?
Administrators using Akamai Enterprise Application Access prior to version 2025-01-17 are affected by CVE-2025-24527.
What kind of attack can CVE-2025-24527 facilitate?
CVE-2025-24527 can facilitate unauthorized access to debug functionality, potentially allowing attackers to manipulate connector configurations.
When was CVE-2025-24527 discovered?
CVE-2025-24527 was discovered and documented in early 2025, affecting versions of Akamai Enterprise Application Access released before January 17, 2025.