Lucene search
K

CVE-2024-0560 Apicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible with rh-sso 7.5 or later versions

🗓️ 28 Feb 2024 16:37:01Reported by redhatType 
cvelist
 cvelist
🔗 www.cve.org👁 17 Views

CVE-2024-0560 Apicast vulnerability with 3Scale and RH-SS

Related
Affected
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC
The vulnerability of the Red Hat 3scale API Management software lies in its improper handling of insufficient permissions or privileges, allowing a malicious actor to execute arbitrary code.
6 Apr 202400:00
bdu_fstec
Circl
CVE-2024-0560
28 Feb 202417:47
circl
CNNVD
Red Hat 3scale Security Vulnerability
28 Feb 202400:00
cnnvd
CVE
CVE-2024-0560
28 Feb 202416:37
cve
EUVD
EUVD-2024-16353
3 Oct 202520:07
euvd
NVD
CVE-2024-0560
28 Feb 202417:15
nvd
OSV
CVE-2024-0560
28 Feb 202417:15
osv
Prion
Design/Logic Flaw
28 Feb 202417:15
prion
Positive Technologies
PT-2024-2635 · Red Hat · 3Scale +2
28 Feb 202400:00
ptsecurity
RedhatCVE
CVE-2024-0560
28 Feb 202416:36
redhatcve
Rows per page
[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.14.1",
        "versionType": "semver"
      }
    ],
    "packageName": "APIcast",
    "collectionURL": "https://github.com/3scale/APIcast",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat 3scale API Management Platform 2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "apicast",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:red_hat_3scale_amp:2"
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Nov 2025 18:09Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.16.3
EPSS0.00083
17