Redhat » 3scale Api Management : Security Vulnerabilities, CVEs, (Gain Privilege) CVSS score >= 5
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.
Max CVSS
7.0
EPSS Score
0.04%
Published
2022-03-03
Updated
2023-08-11
A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.
Max CVSS
6.5
EPSS Score
0.07%
Published
2021-06-02
Updated
2022-07-25
A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scale-2.10.0-ER1 are affected.
Max CVSS
5.5
EPSS Score
0.05%
Published
2021-05-26
Updated
2022-10-21
3 vulnerabilities found