CVE-2020-9587

2020-06-2621:15:17

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

JSON

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

CPENameOperatorVersion
devdocseq2.2.1
devdocseq2.2.8
devdocseq2.2.4
devdocseq2.2.3
devdocseq2.0.17
devdocseq2.1.16
devdocseq2.2.7
devdocseq2.1.13
devdocseq2.0.16
devdocseq2.1.17