CVE-2021-3412

CVE-2021-3412 describes a missing brute-force protection vulnerability in all versions of the 3Scale developer portal, affecting Red Hat 3scale and 3scale API Management. This flaw allows an unauthenticated attacker to bypass login controls with low attack complexity. Successful exploitation could lead to unauthorized access to sensitive information, potential data manipulation, or further system compromise. While rated as HIGH severity (CVSS 7.3), there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.