CVE-2021-3412

Published: Jun 1, 2021Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Affected (2)

Products: Redhat: 3scale, 3scale Api Management

Redhat

2 products

3scale

3scale Api Management

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Redhat 3scale	All versions
Redhat 3scale Api Management	Version 2.0

Related CWEs

CWE-307

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=1928301

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1928301

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.