Information disclosure

2021-02-2615:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor.

CPENameOperatorVersion
amazon_paylt9.4.2

CPE	Name	Operator	Version
	amazon_pay	lt	9.4.2

References

aramido.de/blog/sicherheitshinweise/sicherheitswarnung-amazon-secret-key-offentlich-einsehbar-cve-2020-28199

aramido.de/media/aramido-2020-006-disclosure-amazon-secret-access-key.md