CyberRota Analysis
AI-GeneratedThe Akana API Platform's Policy Manager console is vulnerable to unauthenticated remote code execution due to a path normalization flaw, enabling attackers to bypass authentication and execute arbitrary code on the server. This critical vulnerability poses a severe risk as it allows exploitation without any user interaction or authentication. Organizations using the Akana API Platform should prioritize immediate remediation to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.