CVE-2020-9690

2020-07-2912:20:42

adobe

www.cve.org

5.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.6%

JSON

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

CNA Affected

[
  {
    "product": "Magento",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions"
      }
    ]
  }
]