{"id":"CVE-2019-14836","state":"PUBLISHED","title":"A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized informatio","description":"A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks.","publishedAt":"2021-05-26T11:18:13.000Z","updatedAt":"2024-08-05T00:26:39.122Z","severity":null,"assigner":"redhat","products":["n/a Red Hat 3scale API Management"],"affected":[{"vendor":"n/a","product":"Red Hat 3scale API Management","versions":[{"version":"Red Hat 3scale API Management 2.10.0","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=1847605"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:30.451Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/14xxx/CVE-2019-14836.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-14836","state":"PUBLISHED","datePublished":"2021-05-26T11:18:13.000Z","dateUpdated":"2024-08-05T00:26:39.122Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2019-08-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks."}],"affected":[{"vendor":"n/a","product":"Red Hat 3scale API Management","versions":[{"version":"Red Hat 3scale API Management 2.10.0","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847605","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Cross-Site Request Forgery (CSRF)","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2021-06-02T10:33:16.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847605","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:26:39.122Z"}}]}}}