On March 3, 2019, Rio Sherri from MDSec discovered, and responsibly disclosed, an unauthenticated remote command execution (RCE) vulnerability in CloudTest, that affects all versions prior to 58.30. This vulnerability has been assigned to CVE-2019-11011.

\r\n The discovered vulnerability existed due to an unsafe Java deserialization between certain parameters. After extensive testing, Akamai released a patch on March 7, 2019 and made it available to all CloudTest customers.

\r\n Akamai strongly urges customers that have not already updated their hosted or on-premise installations of CloudTest to version 58.30 or later, to apply the available patches as soon as possible.…