JVN#79762947 EC-CUBE information disclosure vulnerability

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains an information disclosure vulnerability.

Impact

A remote attacker may be able to obtain customer data that is saved by EC-CUBE.

Solution

Update the Software
Apply the latest updates provided by the vendor.

Fix the file
Modify the specific file according to the information provided by the developer.

Products Affected

• EC-CUBE Ver2 Version 2.4.0 RC1 to 2.4.1
• EC-CUBE Community Edition r18068 to r18428
  For more information, refer to the vendor’s website.