Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3412

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Published

2021-06-01T14:15:10.267

Last Modified

2024-11-21T06:21:26.827

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.3 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-307
  • Type: Secondary
    CWE-307
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application redhat 3scale * Yes
Application redhat 3scale_api_management 2.0 Yes
References