CVE-2024-9671: 3scale Api Management Platform: eksik yetkilendirme

Açıklama (NVD)

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed.

Özet bilgiler

Ürün

Redhat 3scale Api Management Platform

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,28 (yüzdelik 21)

CWE

CWE-862

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• CWE-862