CVE-2019-14836

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory

3scale のその他の脆弱性

• CVE-2021-3814高 7.5It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conc…
• CVE-2021-3752高 7.1A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simulta…
• CVE-2020-25634中 5.4A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitiv…
• CVE-2020-10711中 5.9A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing t…
• CVE-2019-14849中 5.4A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use…