Lucene search

K
osvGoogleOSV:CVE-2020-9588
HistoryJun 26, 2020 - 9:15 p.m.

CVE-2020-9588

2020-06-2621:15:17
Google
osv.dev
2

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%