CVE-2019-14852

A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol and break its encryption, gaining access to unauthorized information. Version shipped in Red Hat 3scale API Management Platform is vulnerable to this issue.

• CWE-327
• CWE-327

• https://bugzilla.redhat.com/show_bug.cgi?id=1758208Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1758208Issue Tracking, Third Party Advisory

Published

Mar 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14847A flaw was found in samba 4.0.0 before samba 4.9.15 and samb…4.9
• CVE-2019-14848Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14849A vulnerability was found in 3scale before version 2.6, did …5.4
• CVE-2019-1485A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-14850A denial of service vulnerability was discovered in nbdkit 1…3.7
• CVE-2019-14851A denial of service vulnerability was discovered in nbdkit. …6.5
• CVE-2019-14853An error-handling flaw was found in python-ecdsa before vers…7.5
• CVE-2019-14854OpenShift Container Platform 4 does not sanitize secret data…6.5
• CVE-2019-14855A flaw was found in the way certificate signatures could be …7.5
• CVE-2019-14856ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable …6.5
• CVE-2019-14857A flaw was found in mod_auth_openidc before version 2.4.0.1.…6.1
• CVE-2019-14858A vulnerability was found in Ansible engine 2.x up to 2.8 an…5.5