CVE-2021-3814
CVE-2021-3814
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Mar 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure.
Affected products
n/a · 3scaleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →