Unauthorized Access in Akamai SIA ThreatAvert Product
CVE-2024-45164
7.1HIGH
What is CVE-2024-45164?
The vulnerability identified in Akamai SIA ThreatAvert involves insufficient authorization controls within the Admin functionality of the ThreatAvert Policy page. This flaw allows authenticated users to navigate to the specific URI /#app/intelligence/threatAvertPolicies, potentially leading to unauthorized actions such as disabling policy enforcement settings. This raises security concerns, as it may enable malicious actors to manipulate security policies without appropriate permissions, affecting overall system integrity.