CVE-2019-14852

Related Vulnerabilities: CVE-2019-14852  

A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol and break its encryption, gaining access to unauthorized information.

Description

A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol and break its encryption, gaining access to unauthorized information.

Additional Information

  • Bugzilla 1758208: CVE-2019-14852 apicast: deprecated protocol TLS 1.0 enabled in gateway
  • CWE-327: Use of a Broken or Risky Cryptographic Algorithm
  • FAQ: Frequently asked questions about CVE-2019-14852