CVE-2020-14388

EPSS 0.18%
Veröffentlicht 02.06.2021 13:15:10
Zuletzt bearbeitet 21.11.2024 05:03:09
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ 3scale Api Management Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.365

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.3	2.8	3.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://bugzilla.redhat.com/show_bug.cgi?id=1875553

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2020-14388

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-14388

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-14388

EUVD