Red Hat Security Advisory

RHSA-2017:1712

Red Hat 3scale API Management Platform 2.0.0 security update

Released 2017-07-06 · Red Hat rating Important · View on Red Hat →

Fixed in

RHAMP-2.0 3scale-amp20/memcached@facdf907b2eda22f0f5604c8e068adbbdb6b7e1bdeb2800cf42ce3299d5f6523_amd64

TI-2017-05155 CVE-2017-7512 · GHSA-6574-p8rp-gxqh

MEDIUM 46

Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02163 Published 2017-07-07 Fixed CWE-863