Published: 07/07/2017 Updated: 03/10/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to 3scale Api Management Platform

Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) prior to 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat 3scale api management platform -

Synopsis Important: Red Hat 3scale API Management Platform 200 security update Type/Severity Security Advisory: Important Topic A security update for Red Hat 3scale API Management Platform 200 is now available from the Red Hat Container CatalogRed Hat Product Security has rated this update as having a ...

Several security issues were fixed in OpenVPN ...

It was found that RH-3scale AMP would permit creation of an access token without a client secret An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs ...

A remote denial of service has been found in OpenVPN < 243 A remote client can exploit a memory leak in the server's certificate parsing code to make it leak a few bytes of memory for each connection attempt, causing it to run out of memory ...

CWE-863 https://bugzilla.redhat.com/show_bug.cgi?id=1457997 https://access.redhat.com/security/cve/cve-2017-7512 https://access.redhat.com/errata/RHSA-2017:1712 https://access.redhat.com/errata/RHSA-2017:1712 https://usn.ubuntu.com/3339-1/https://nvd.nist.gov

CVE-2017-7512

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect