What’s Vulnerable › Vulnerabilities
CVE-2024-45164
- Severity: high (CVSS 7.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-11-04 · updated 2026-06-17
- Weakness: CWE-863
Description
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticated user can navigate directly to the /#app/intelligence/threatAvertPolicies URI and disable policy enforcement.
Affected products
References
- https://notes.netbytesec.com/2024/11/cve-2024-45164-broken-access-control.html
- https://www.akamai.com/global-services/support/vulnerability-reporting
Get alerted when CVE-2024-45164 or the next vulnerability affects your stack