Vulnerabilities > CVE-2021-3412 - Unspecified vulnerability in Redhat 3Scale and 3Scale API Management

047910
CVSS 7.3 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
LOW
network
low complexity
redhat

Summary

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Vulnerable Configurations

Part Description Count
Application
Redhat
2