Vulnerabilities > CVE-2021-3814 - Missing Authorization vulnerability in Redhat 3Scale
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 18 |