CVE-2021-3412

EPSS 0.15%
Published 01.06.2021 14:15:10
Last modified 21.11.2024 06:21:26
Source secalert@redhat.com
Teams watchlist Login
Open Login

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ 3scale

Redhat ≫ 3scale Api Management Version2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.15%	0.367

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

https://bugzilla.redhat.com/show_bug.cgi?id=1928301

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2021-3412

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-3412

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-3412

EUVD