Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-3412

No fix known EPSS <1%

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Published 2021-06-01 · CVE record · OSV

Products: redhat 3scale, redhat 3scale_api_management