CVEvulnerability

CVE-2021-3523

7.5 HIGH Published 2022-04-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-281

Description

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

Affected configurations

• redhat apicast (< 2.11.0)

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References