What is CVE-2020-14388?

CVE-2020-14388 is a medium-severity vulnerability in Red Hat 3scale API Management, classified under Improper Access Control. CVSS score: 6.3/10. Published 2021-06-02.

How severe is CVE-2020-14388?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Red Hat 3scale API Management

CVE-2020-14388

A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This flaw allows an authenticated user to bypass normal account restrictions and access API services where they do not have permission.

EPSS: 0.006 (47.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Redhat 3scale_api_management — versions 2.0
N/a Red Hat 3scale Api Management — versions Red Hat 3scale API Management 2.10.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

secalert@redhat.com (x_refsource_MISC, Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14388?: CVE-2020-14388 is a medium-severity vulnerability in Red Hat 3scale API Management, classified under Improper Access Control. CVSS score: 6.3/10. Published 2021-06-02.
How severe is CVE-2020-14388?: Medium severity. CVSS v3 base score is 6.3 out of 10.