apicast
4 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-0560 | < 2.14.1 | Apicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versions | MEDIUM 6.3 | 0.5 % | ||
| CVE-2023-0456 | corrigé en 2.13.2, 2.14.0, 2.12.2 | Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization check | HIGH 7.5 | 0.6 % | ||
| CVE-2021-3523 | 3scale-apicast versions prior to 2.11.0 | A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an a | HIGH 7.5 | 0.8 % | ||
| CVE-2019-14852 | As shipped with Red Hat 3scale API Management Platform | A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol | HIGH 7.5 | 0.4 % |