Vendor/product archive

redhat / 3scale_api_management_platform CVEs

Beta · best-effort

2 CVEs tagged to redhat / 3scale_api_management_platform — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2024-9671

Published Oct 9, 2024

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or gue…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-7512

Published Jul 7, 2017

Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circ…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1