Vulnerabilities > CVE-2020-14388 - Unspecified vulnerability in Redhat 3Scale API Management 2.0

047910
CVSS 6.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
redhat

Summary

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

Vulnerable Configurations

Part Description Count
Application
Redhat
1