VULNERABILITY INTELLIGENCE

CVE-2021-3412

CVSS score7.3 HIGH
EPSS probability0.76%
CISA KEVNot currently listed
Published2021-06-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Weakness classification

  • CWE-307: Improper Restriction of Excessive Authentication Attempts

Primary references