CVE-2025-24527

CVSS 3.1 Score 8 of 10 (high)

Details

Published Jan 29, 2025
Updated: Feb 6, 2025
CWE ID 732

Summary

CVE-2025-24527 is a vulnerability affecting Akamai Enterprise Application Access (EAA) versions prior to 2025-01-17. This issue grants administrators unauthorized access to debug commands if they possess another tenant's unique 128-bit connector GUID. By exploiting this vulnerability, an attacker could potentially manipulate a targeted connector, posing a significant risk to the affected organization's security.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share