CVE-2021-3412

7.3 highEPSS 0.8%

High (7.3) in redhat. EPSS 0.8% chance of exploitation in the next 30 days.

It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2021-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:3scale
redhat:3scale_api_management

References

https://bugzilla.redhat.com/show_bug.cgi?id=1928301
https://bugzilla.redhat.com/show_bug.cgi?id=1928301

Check your stack JSON