What is RHSA-2021:1129?

RHSA-2021:1129 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat 3scale API Management 2.10.0 security update and release

Which CVE IDs does RHSA-2021:1129 cover?

RHSA-2021:1129 covers the following CVE IDs: CVE-2019-14836, CVE-2020-9283, CVE-2020-14040. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:1129?

RHSA-2021:1129 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2021:1129MediumCVSS 7.5

Red Hat Security Advisory: Red Hat 3scale API Management 2.10.0 security update and release

Vendor

Red Hat Product Security

Published

April 8, 2021

Last Modified

June 30, 2026

🔗 CVE IDs covered (3)

CVE-2019-14836 →CVE-2020-9283 →CVE-2020-14040 →

📋 Description

CVE-2019-14836 — 3scale: dev portal missing protection against login CSRF CVE-2020-9283 — golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic CVE-2020-14040 — golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2021:1129
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/documentation/en-us/red_hat_3scale_api_management/2.10/html-single/installing_3scale/index
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1804533
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1853652
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1129.json