NVD

Id
88079  
Name
CVE-2017-7512  
Description
Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512 maps to an OpenVPN vulnerability. The proper CVE ID for that OpenVPN vulnerability is CVE-2017-7521. Specifically, CVE-2017-7521 is the correct CVE ID for TWO closely related findings in OpenVPN. Any source that lists BOTH CVE-2017-7512 and CVE-2017-7521 for OpenVPN should have listed ONLY CVE-2017-7521.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-07  
Modified Date
2017-07-17  
Seq
2017-7512  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
423627 88079 CVE-2017-6651 98387  View
423628 88079 CVE-2017-6651 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms  View
423629 88079 CVE-2017-6651 98387  View
423630 88079 CVE-2017-6651 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170510-cwms  View
430377 88079 CVE-2017-0664 99470  View
430378 88079 CVE-2017-0664 https://source.android.com/security/bulletin/2017-07-01  View
430379 88079 CVE-2017-0664 99470  View
430380 88079 CVE-2017-0664 https://source.android.com/security/bulletin/2017-07-01  View

Related JVN