Lucene search

K
cvelistAdobeCVELIST:CVE-2021-21026
HistoryFeb 09, 2021 - 12:00 a.m.

CVE-2021-21026 Magento Commerce Incorrect permissions Could Lead To Unauthorized Access

2021-02-0900:00:00
CWE-285
adobe
raw.githubusercontent.com
1

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

Related for CVELIST:CVE-2021-21026