important · Edge — Akana
An authentication-filter mismatch exposes Akana Policy Manager's script evaluator to unauthenticated callers.
Affects
Akana API Platform Policy Manager, an enterprise API-management console operated on customer infrastructure.
A crafted path is interpreted differently by the authentication filter and servlet dispatcher, allowing the request to reach unsandboxed script evaluation.
Detail and 4 sources
The route is established through the CNA description and version records, but has no public demonstration.