Security
فارسی
All products

Red Hat 3scale API Management Platform 2/system

Red Hat · Package
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Regular Expression Denial of Service in Addressable templatesCVE-2021-32740 · GHSA-JXHC-Q857-3J6G CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/3scale-amp-system Red HatRubyGems High Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37701 · GHSA-9R2W-394V-53QC tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic linksCVE-2021-37712 · GHSA-QQ89-HQ3F-393P tarOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Puma's Keepalive Connections Causing Denial Of ServiceCVE-2021-29509 · GHSA-Q28M-8XJW-8VR5 CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system Red HatRubyGems High Fix reported
WEBRick vulnerable to HTTP Request/Response SmugglingCVE-2020-25613 · GHSA-GWFG-CQMG-CF8F CloudForms Management Engine 5/rubyRed Hat 3scale API Management Platform 2/ruby-rack Red HatRubyGems High Fix reported
ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStoreCVE-2020-8165 · GHSA-2P68-F74V-9WC6 CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system Red HatRubyGems Critical Fix reported
Denial of service in css-whatCVE-2021-33587 · GHSA-Q8PJ-2VQX-8GGC css-whatOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
Arbitrary Code Execution in RdocCVE-2021-31799 · GHSA-GGXM-PGC9-G7FP Red Hat 3scale API Management Platform 2/systemRed Hat Enterprise Linux 7/ruby Red HatRubyGems High Fix reported
Unsafe object creation in json RubyGemCVE-2020-10663 · GHSA-JPHG-QWRW-7W9G CloudForms Management Engine 5/rubygem-jsonRed Hat 3scale API Management Platform 2/system Red HatRubyGems High Fix reported
Action Pack contains Information Disclosure / Unintended Method Execution vulnerabilityCVE-2021-22885 · GHSA-HJG4-8Q5F-X6FM CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system Red HatRubyGems High Fix reported
Active Record subject to Regular Expression Denial-of-Service (ReDoS)CVE-2021-22880 · GHSA-8HC4-XXM3-5PPP CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/rubygem-activerecord Red HatRubyGems High Fix reported
Possible DoS Vulnerability in Action Controller Token AuthenticationCVE-2021-22904 · GHSA-7WJX-3G7J-8584 CloudForms Management Engine 5/cfme-gemsetRed Hat 3scale API Management Platform 2/system Red HatRubyGems High Fix reported
Resource exhaustion in socket.io-parserCVE-2020-36049 · GHSA-XFHH-G9F5-X4M4 socket.io-parserRed Hat 3scale API Management Platform 2/system npmRed Hat High Fix reported
Cross-Site Scripting in swagger-uiCVE-2016-5682 · GHSA-P239-93F7-H6XF swagger-uiRed Hat 3scale API Management Platform 2/system npmRed Hat Critical Fix reported
HTTP Response Splitting in PumaCVE-2020-5247 · GHSA-84J7-475P-HP8V CloudForms Management Engine 5/rubygem-pumaRed Hat 3scale API Management Platform 2/system Red HatRubyGems Medium Fix reported
libxml2: memory leak in xmlSchemaPreRun in xmlschemas.cCVE-2019-20388 Red Hat 3scale API Management Platform 2/system Red Hat Medium No fix reported
3scale-system: API docs accessible without permissionsCVE-2020-25634 Red Hat 3scale API Management Platform 2/system Red Hat Medium No fix reported
3scale-system: member role permissions bypass when editing servicesCVE-2020-14388 Red Hat 3scale API Management Platform 2/system Red Hat Medium No fix reported
3scale: lack of brute force protection on dev portal loginCVE-2021-3412 Red Hat 3scale API Management Platform 2/system Red Hat Medium No fix reported