CVE-2024-45164
Published: 04 November 2024
Summary
CVE-2024-45164 is a high-severity Incorrect Authorization (CWE-863) vulnerability in Akamai Secure Internet Access Enterprise Threatavert. Its CVSS base score is 7.1 (High).
Operationally, ranked at the 37.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-41342
Vulnerability details
Akamai SIA (Secure Internet Access Enterprise) ThreatAvert, in SPS (Security and Personalization Services) before the latest 19.2.0 patch and Apps Portal before 19.2.0.3 or 19.2.0.20240814, has incorrect authorization controls for the Admin functionality on the ThreatAvert Policy page. An authenticated…
more
user can navigate directly to the /#app/intelligence/threatAvertPolicies URI and disable policy enforcement.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Periodic review and update of procedures reduces incorrect authorization implementations over time.
Defining permitted attribute values and auditing modifications reduces the chance of incorrect authorization outcomes due to tampered or missing labels.
Assessments review permission assignments on critical resources to confirm correctness, mitigating exploitation via incorrect permissions.
Certification evaluates whether authorization decisions are correctly implemented and enforced.
Defining and enforcing access restrictions ensures correct permission assignments on resources that support changes.
Authorization reviews within the risk management program detect and prevent incorrect authorization logic or policy enforcement before systems receive approval to operate.
Program reviews and corrects overly permissive resource assignments that insiders could exploit for unauthorized access.
Provides oversight for correct permission and privilege assignments on data stores, files, and repositories.