CVE-2024-5250 - Vulnerability Details - OpenCVE

In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Perforce	Akana Api

Configuration 1 [-]

cpe:2.3:a:perforce:akana_api:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://portal.perforce.com/s/detail/a91PA000001SUIjYAO

History

Tue, 01 Oct 2024 15:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Perforce Perforce akana Api
CPEs		cpe:2.3:a:perforce:akana_api::::::::
Vendors & Products		Perforce Perforce akana Api

MITRE

Status: PUBLISHED

Assigner: Perforce

Published: 2024-07-30T18:29:11.375Z

Updated: 2024-08-01T21:03:11.081Z

Reserved: 2024-05-22T21:48:25.280Z

Link: CVE-2024-5250

Vulnrichment

Updated: 2024-08-01T21:03:11.081Z

NVD

Status : Modified

Published: 2024-07-30T19:15:11.613

Modified: 2024-11-21T09:47:16.567

Link: CVE-2024-5250

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-5250", "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "state": "PUBLISHED", "assignerShortName": "Perforce", "dateReserved": "2024-05-22T21:48:25.280Z", "datePublished": "2024-07-30T18:29:11.375Z", "dateUpdated": "2024-08-01T21:03:11.081Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Akana API Platform", "vendor": "Akana", "versions": [{"lessThan": "2024.1.0", "status": "affected", "version": "0.0.0", "versionType": "SEM"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations</span><p></p>"}], "value": "In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "Perforce", "dateUpdated": "2024-07-30T18:29:11.375Z"}, "references": [{"url": "https://portal.perforce.com/s/detail/a91PA000001SUIjYAO"}], "source": {"discovery": "UNKNOWN"}, "title": "Overly Verbose Errors in SAML Integration", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-30T19:43:27.369233Z", "id": "CVE-2024-5250", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-30T19:43:46.668Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:03:11.081Z"}, "title": "CVE Program Container", "references": [{"url": "https://portal.perforce.com/s/detail/a91PA000001SUIjYAO", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://portal.perforce.com/s/detail/a91PA000001SUIjYAO", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:03:11.081Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-5250", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-30T19:43:27.369233Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-30T19:43:43.346Z"}}], "cna": {"title": "Overly Verbose Errors in SAML Integration", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Akana", "product": "Akana API Platform", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2024.1.0", "versionType": "SEM"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://portal.perforce.com/s/detail/a91PA000001SUIjYAO"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations</span><p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information"}]}], "providerMetadata": {"orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "Perforce", "dateUpdated": "2024-07-30T18:29:11.375Z"}}}, "cveMetadata": {"cveId": "CVE-2024-5250", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:03:11.081Z", "dateReserved": "2024-05-22T21:48:25.280Z", "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "datePublished": "2024-07-30T18:29:11.375Z", "assignerShortName": "Perforce"}, "dataVersion": "5.1"}