{"id":"CVE-2021-3412","aliases":["EUVD-2021-26740","GHSA-jh24-r4rp-jw9m"],"status":"published","title":"It was found that all versions of 3Scale developer portal lacked brute force protections. An...","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0076,"percentile":0.55613,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-307"],"published":"2021-06-01T13:47:23Z","modified":"2026-10-24T10:30:32Z","products":[{"vendor":"redhat","product":"3scale"},{"vendor":"redhat","product":"3scale_api_management"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928301","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3412"},{"url":"https://github.com/advisories/GHSA-jh24-r4rp-jw9m"}],"sources":{"cve":[{"id":"CVE-2021-3412","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","status":"published","published":"2021-06-01T13:47:23Z","modified":"2024-08-03T16:53:17.533Z","cwes":["CWE-307"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26740","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","status":"published","published":"2021-06-01T13:47:23Z","modified":"2024-08-03T16:53:17Z","updated_at":"2026-11-03T03:25:13.052236Z"}],"ghsa":[{"id":"GHSA-jh24-r4rp-jw9m","title":"It was found that all versions of 3Scale developer portal lacked brute force protections. An...","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","status":"published","published":"2022-05-24T19:03:43Z","modified":"2023-01-29T05:07:47Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:46:11.123221Z"}],"nvd":[{"id":"CVE-2021-3412","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","status":"published","published":"2021-06-01T14:15:10.267Z","modified":"2026-06-17T04:05:02.79Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-307"],"updated_at":"2026-11-02T14:06:53.987491Z"}],"osv":[{"id":"CVE-2021-3412","description":"It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks.","status":"published","published":"2021-06-01T14:15:10.267Z","modified":"2026-10-24T10:30:32.027069125Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:20.13324Z"}]}}