Vulnerabilities > CVE-2021-3412 - Improper Restriction of Excessive Authentication Attempts vulnerability in Redhat 3Scale and 3Scale API Management
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |