CVE-2021-3412CWE-307

It was found that all versions of 3Scale developer portal lacked brute force protections

published June 1, 2021

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00760 · 54.8th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2021-06-01T13:47Z
EPSS history
Timeline
  • 01 JUN 13:47Z
    It was found that all versions of 3Scale developer portal lacked brute force protections
    cvelistv5