medium5.3
CVE-2024-9671
A vulnerability was found in 3Scale.
Impact
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | 3scale Api Management Platform | Version 2.0 |