CVE-2020-24405 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data

🗓️ 09 Nov 2020 00:39:43Reported by adobeType

Magento version 2.4.0 and 2.3.5p1 affected by unauthorized modification of inventory stock data

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2020-24405	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the integrity of the protected information.	17 Nov 202000:00	–	bdu_fstec
CNVD	Adobe Magento Improper Authorization Vulnerability (CNVD-2020-57888)	19 Oct 202000:00	–	cnvd
CVE	CVE-2020-24405	9 Nov 202000:39	–	cve
EUVD	EUVD-2022-4707	3 Oct 202520:07	–	euvd
Github Security Blog	Magento incorrect permissions vulnerability in the Inventory module	24 May 202217:33	–	github
NVD	CVE-2020-24405	9 Nov 202001:15	–	nvd
OpenVAS	Magento < 2.3.6, 2.4.x < 2.4.1 Multiple Vulnerabilities (APSB20-59)	23 Oct 202000:00	–	openvas
OSV	BIT-MAGENTO-2020-24405 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data	6 Mar 202411:07	–	osv
OSV	GHSA-P7M7-J8JV-393Q Magento incorrect permissions vulnerability in the Inventory module	24 May 202217:33	–	osv

[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.5p1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb20-59.html

09 Nov 2020 00:39Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.14.3

EPSS0.01501

CWE-285