CVE-2019-14852
CVE-2019-14852
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Patch —
Lifecycle
18 Mar 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol and break its encryption, gaining access to unauthorized information. Version shipped in Red Hat 3scale API Management Platform is vulnerable to this issue.
Affected products
n/a · apicastWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →