CVE-2020-25634

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

3scale のその他の脆弱性

• CVE-2021-3814高 7.5It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conc…
• CVE-2021-3752高 7.1A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simulta…
• CVE-2019-14836高 8.8A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use thi…
• CVE-2020-10711中 5.9A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing t…
• CVE-2019-14849中 5.4A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use…