high7.3
CVE-2021-3412
It was found that all versions of 3Scale developer portal lacked brute force protections.
Impact
It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | 3scale | All versions |
| Redhat | 3scale Api Management | Version 2.0 |