CVE-2021-20778

🗓️ 01 Jul 2021 05:45:17Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 100 Views

Improper access control vulnerability in EC-CUBE 4.0.6 allows remote attacker to bypass access restriction and obtain sensitive informatio

Reporter	Title	Published	Views	Family All 9
CNNVD	Ec-cube 访问控制错误漏洞	1 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-20778	1 Jul 202105:45	–	cvelist
EUVD	EUVD-2021-8190	3 Oct 202520:07	–	euvd
Github Security Blog	EC-CUBE Improper access control vulnerability	24 May 202219:06	–	github
Japan Vulnerability Notes	JVN#57942445: EC-CUBE fails to restrict access permissions	1 Jul 202100:00	–	jvn
Japan Vulnerability Notes	EC-CUBE fails to restrict access permissions	1 Jul 202106:49	–	jvn
NVD	CVE-2021-20778	1 Jul 202106:15	–	nvd
Prion	Improper access control	1 Jul 202106:15	–	prion
RedhatCVE	CVE-2021-20778	22 May 202518:17	–	redhatcve

NVD

Node

ec-cube ec-cubeMatch4.0.6-

[
  {
    "product": "EC-CUBE",
    "vendor": "EC-CUBE CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.6 (EC-CUBE 4 series)"
      }
    ]
  }
]

Source	Link
ec-cube	www.ec-cube.net/info/weakness/weakness.php
jvn	www.jvn.jp/en/jp/JVN57942445/index.html
jvn	www.jvn.jp/en/jp/JVN57942445/index.html

21 Nov 2024 05:47Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.00294