CVE-2020-14388CWE-284

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced

published June 2, 2021

CVSS
—
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00598 · 47.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-06-02T12:37Z
EPSS history
Timeline
  • 02 JUN 12:37Z
    A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced
    cvelistv5