Vulnerabilities > CVE-2024-9671 - Missing Authorization vulnerability in Redhat 3Scale API Management Platform 2.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |