CVE-2020-14388

EPSS 0.18%
Published 02.06.2021 13:15:10
Last modified 21.11.2024 05:03:09
Source secalert@redhat.com
Teams watchlist Login
Open Login

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ 3scale Api Management Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.365

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.3	2.8	3.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://bugzilla.redhat.com/show_bug.cgi?id=1875553

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2020-14388

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-14388

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-14388

EUVD