CVE-2021-3412

Katalog CVE

CVSS 7.3 · High EPSS 0,76%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada redhat 3scale, redhat 3scale api management. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Rincian

Terbit di NVD

1 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,76% peluang dieksploitasi; lebih tinggi dari 54,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1928301 issue tracking · advisory vendor