{"id":"CVE-2020-25634","details":"A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scale-2.10.0-ER1 are affected.","modified":"2026-07-08T05:55:56.790865863Z","published":"2021-05-26T21:15:08.070Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"2.10.0"}],"source":"CPE_RANGE","vendor_product":"redhat:3scale","cpes":["cpe:2.3:a:redhat:3scale:*:*:*:*:*:*:*:*"]},{"vendor_product":"redhat:3scale","cpes":["cpe:2.3:a:redhat:3scale:2.10.0:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.10.0-NA"},{"last_affected":"2.10.0-NA"}],"source":"CPE_STRING"},{"vendor_product":"redhat:3scale_api_management","cpes":["cpe:2.3:a:redhat:3scale_api_management:2.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0"},{"last_affected":"2.0"}],"source":"CPE_STRING"}]},"references":[{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880201"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/3scale/apicast","events":[{"introduced":"0"},{"fixed":"7ddaeca832054a05f90b5cac530aeed02fd33f06"}],"database_specific":{"source":"DESCRIPTION","extracted_events":[{"introduced":"0"},{"fixed":"3scale-2.10.0-ER1"}]}}],"versions":["3scale-2.8.0-DR1","v3.6.0-beta1","3scale-2.6.0-ER1","v3.5.0-beta1","v3.5.0-rc1","v3.4.0-rc1","3scale-2.4.0-DR2","3scale-2.4.0-DR1","2.4.0-DR1","v3.3.0-cr1","v3.3.0-beta2","v3.3.0-beta1","3scale-2.3.0-ER1","v3.2.0-beta3","3scale-2.2.0-ER2","v3.2.0-beta2","v3.2.0-beta1","3scale-2.2.0-ER1","3scale-2.2.0-DR2","v3.1.0-rc1","3scale-2.1.0-CR1","3scale-2.1.0-ER2","v3.1.0-beta1","3scale-2.1.0-ER1","v3.1.0-alpha1","v3.0.0-rc1","v3.0.0","3scale-2.0.0-CR1","v3.0.0-beta3","3scale-2.0.0-ER5","v3.0.0-beta1","3scale-2.0.0-ER4","3.0.0-beta1","v3.0.0-beta2","3scale-2.0.0-ER4-2","v3.0.0-alpha2","RHAMP-2.0-ER3","v3.0.0-alpha1","RHAMP-2.0-ER2","v0.2","v0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25634.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"}]}