CVE-2019-14836

Mô tả

Tham khảo

• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory

Lỗ hổng khác của 3scale

• CVE-2021-3814CAO 7.5It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conc…
• CVE-2021-3752CAO 7.1A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simulta…
• CVE-2020-25634TRUNG BÌNH 5.4A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitiv…
• CVE-2020-10711TRUNG BÌNH 5.9A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing t…
• CVE-2019-14849TRUNG BÌNH 5.4A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use…