What is RHSA-2021:3851?

RHSA-2021:3851 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat 3scale API Management 2.11.0 Release - Container Images

Which CVE IDs does RHSA-2021:3851 cover?

RHSA-2021:3851 covers the following CVE IDs: CVE-2020-8911, CVE-2020-8912, CVE-2021-3442, CVE-2021-3814, CVE-2021-23017. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:3851?

RHSA-2021:3851 has a CVSS v3 base score of 8.1, published by Red Hat Product Security.

RHSA-2021:3851HighCVSS 8.1

Red Hat Security Advisory: Red Hat 3scale API Management 2.11.0 Release - Container Images

Vendor

Red Hat Product Security

Published

October 14, 2021

Last Modified

June 26, 2026

🔗 CVE IDs covered (5)

CVE-2020-8911 →CVE-2020-8912 →CVE-2021-3442 →CVE-2021-3814 →CVE-2021-23017 →

📋 Description

CVE-2020-8911 — aws/aws-sdk-go: CBC padding oracle issue in AWS S3 Crypto SDK for golang CVE-2020-8912 — aws-sdk-go: In-band key negotiation issue in AWS S3 Crypto SDK for golang CVE-2021-3442 — RHOAM: XSS in 3scale at various places CVE-2021-3814 — 3scale: missing validation of access token CVE-2021-23017 — nginx: Off-by-one in ngx_resolver_copy() when labels are followed by a pointer to a root domain name

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2021:3851
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1869800
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1869801
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1930083
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3851.json