Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3523

Опубликовано: 27 апр. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 4.3
EPSS Низкий

Описание

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:apicast:*:*:*:*:*:*:*:*
Версия до 2.11.0 (исключая)

EPSS

Процентиль: 37%
0.00164
Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-281
CWE-281

Связанные уязвимости

CVSS3: 6.8
redhat
почти 4 года назад

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

CVSS3: 7.5
github
почти 4 года назад

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

EPSS

Процентиль: 37%
0.00164
Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-281
CWE-281