QwikSec

Security Database

CVE

CWE

Training

CVE-2020-14388

Published: Jun 2, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

Vendor	Product	Versions
n/a	Red Hat 3scale API Management	affected `Red Hat 3scale API Management 2.10.0`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=1875553

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.