Skip to main content

3Scale Api Management CVE-2023-4910

MEDIUM
Exposure of Resource to Wrong Sphere (CWE-668)
2023-11-06 secalert@redhat.com
Information Disclosure 3Scale Api Management
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 06, 2023 - 13:15 nvd
MEDIUM 5.5

DescriptionNVD

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache.

AnalysisAI

A flaw was found In 3Scale Admin Portal. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Resource to Wrong Sphere (CWE-668), which allows attackers to access resources from an unintended security context. A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache. Affected products include: Redhat 3Scale Api Management.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement proper access controls, validate resource access permissions, use security boundaries.

More in 3Scale Api Management

View all
CVE-2022-1414 HIGH
8.8 Oct 19

3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. Rated high severity (CVS
CVE-2022-0330 HIGH
7.8 Mar 25

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may r
CVE-2019-10216 HIGH
7.8 Nov 27

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scr
CVE-2024-10295 HIGH
7.5 Oct 24

A flaw was found in Gateway. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authenticati
CVE-2021-3412 HIGH
7.3 Jun 01

It was found that all versions of 3Scale developer portal lacked brute force protections. Rated high severity (CVSS 7.3)
CVE-2021-20252 MEDIUM
6.5 Feb 23

A flaw was found in Red Hat 3scale API Management Platform 2. Rated medium severity (CVSS 6.5), this vulnerability is re

Same weakness CWE-668 – Exposure of Resource to Wrong Sphere

View all
CVE-2021-46354 HIGH POC
7.5
CVE-2017-0215 MEDIUM
5.3
CVE-2026-45411 CRITICAL POC
9.8
CVE-2023-45911 CRITICAL POC
9.8
CVE-2020-10271 CRITICAL POC
9.8
CVE-2020-10867 CRITICAL POC
9.8
CVE-2019-19015 CRITICAL POC
9.8
CVE-2018-7072 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-4910 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy