CVE-2021-3523CWE-281

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse

published April 27, 2022

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.7th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2022-04-27T20:58Z
EPSS history
Timeline
  • 27 APR 20:58Z
    A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse
    cvelistv5