BIT-MAGENTO-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API

🗓️ 06 Mar 2024 11:08:04Reported by GoogleType

osv🔗 osv.dev👁 27 Views

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are vulnerable to unauthorized inventory changes via REST AP

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the confidentiality and integrity of the protected information.	17 Nov 202000:00	–	bdu_fstec
CNVD	Adobe Magento Improper Authorization Vulnerability (CNVD-2020-57887)	19 Oct 202000:00	–	cnvd
CVE	CVE-2020-24403	9 Nov 202000:39	–	cve
Cvelist	CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API	9 Nov 202000:39	–	cvelist
EUVD	EUVD-2022-2152	3 Oct 202520:07	–	euvd
Github Security Blog	Magento incorrect user permissions vulnerability within the Inventory component	24 May 202217:33	–	github
NVD	CVE-2020-24403	9 Nov 202001:15	–	nvd
OpenVAS	Magento < 2.3.6, 2.4.x < 2.4.1 Multiple Vulnerabilities (APSB20-59)	23 Oct 202000:00	–	openvas
OSV	GHSA-39RW-4M66-82GF Magento incorrect user permissions vulnerability within the Inventory component	24 May 202217:33	–	osv
Prion	Spoofing	9 Nov 202001:15	–	prion