3scale-amp2/apicast-gateway-rhel8 vulnerabilities

CVEs whose affected-version data names the 3scale-amp2/apicast-gateway-rhel8 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-10295High· 7.5

2y ago

Gateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a request

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing special characters bypasses authentication…

▾ TwilightRed Hat · gatewayEPSS 0.39%via CVEORG