Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Red Hat Component: 3scale Api Management Clear all filters
TI-2024-09540 CVE-2024-10295 · GHSA-qh7g-57ww-6fq4

Incorrect authorization in gateway

Priority MEDIUM 41

A flaw was found in Gateway.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00393 Published 2024-10-24 No fix listed CWE-863
TI-2022-01295 CVE-2022-1414 · GHSA-c7ff-fqm5-qq8j

Improper input validation in 3scale-amp-system

Priority MEDIUM 42

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00936 Published 2022-10-19 Will not fix CWE-1173
TI-2021-02598 CVE-2021-3656

Missing authorization in KVM

Priority LOW 39

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00658 Published 2022-03-04 Partial fix CWE-862
TI-2021-02555 CVE-2021-3609 · GHSA-rv9w-mxpp-hwhj

Race condition in kernel

Priority LOW 31

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00431 Published 2022-03-03 Partial fix CWE-362
TI-2020-11256 CVE-2020-14388 · GHSA-rf23-4mjm-jm7q

Improper access control in Red Hat 3scale API Management

Priority LOW 29

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00598 Published 2021-06-02 Will not fix CWE-284
TI-2021-02378 CVE-2021-3412 · GHSA-jh24-r4rp-jw9m

Missing brute-force protection in 3Scale

Priority LOW 33

It was found that all versions of 3Scale developer portal lacked brute force protections.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0076 Published 2021-06-01 No fix listed CWE-307
TI-2020-15652 CVE-2020-25634 · GHSA-3f3r-g48r-83hh

Improper access control in 3scale-system

Priority LOW 25

A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00517 Published 2021-05-26 Partial fix · 3scale-2.10.0-ER1 CWE-284
TI-2019-11056 CVE-2019-14852 · GHSA-hpq5-x75j-q4f2

Broken or risky cryptographic algorithm in apicast

Priority LOW 33

A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00433 Published 2021-03-18 No fix listed CWE-327
TI-2021-03544 CVE-2021-20252 · GHSA-qjp3-fvjv-f8w7

Improper input validation in 3scale/backend

Priority LOW 31

A flaw was found in Red Hat 3scale API Management Platform 2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00972 Published 2021-02-23 No fix listed CWE-20