CVE-2021-3523

HIGH

3Scale APICast < 2.11.0 - Security Restriction Bypass via Connection Reuse

Title source: llm
STIX 2.1

Description

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker to bypass security restrictions for an API request when hosting multiple APIs on the same IP address.

References (1)

Core 1
Core References
Issue Tracking, Vendor Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1954805

Scores

CVSS v3 7.5
EPSS 0.0077
EPSS Percentile 50.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-281
Status published
Products (1)
redhat/apicast < 2.11.0
Published Apr 27, 2022
Tracked Since Feb 18, 2026