CVE-2020-25634

Mô tả

Tham khảo

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Lỗ hổng khác của 3scale

• CVE-2021-3814CAO 7.5It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conc…
• CVE-2021-3752CAO 7.1A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simulta…
• CVE-2019-14836CAO 8.8A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use thi…
• CVE-2020-10711TRUNG BÌNH 5.9A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing t…
• CVE-2019-14849TRUNG BÌNH 5.4A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use…