VULNERABILITY INTELLIGENCE

CVE-2020-25634

CVSS score5.4 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2021-05-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scale-2.10.0-ER1 are affected.

Weakness classification

  • secalert@redhat.com: CWE-284
  • nvd@nist.gov: CWE-306

Primary references