Description (CNA)
A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently large date range to eventually yield an internal server error resulting in denial of service. The highest threat from this vulnerability is to system availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / 3scale/backend | affected As shipped by Red Hat 3scale API Management Platform 2 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.