CVE-2020-25634CWE-284

A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials

published May 26, 2021

CVSS
—
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scale-2.10.0-ER1 are affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-05-26T20:54Z
EPSS history
Timeline
  • 26 MAY 20:54Z
    A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials
    cvelistv5