Lucene search

PRIOn knowledge basePRION:CVE-2021-21031

HistoryFeb 11, 2021 - 8:15 p.m.

Authentication flaw

2021-02-1120:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.

CPENameOperatorVersion
magentolt2.3.6
magentolt2.3.6
magentoeq2.4.1
magentoeq2.4.1
magentoeq2.4.0
magentoeq2.4.0 p1
magentoeq2.4.0
magentoeq2.4.0 p1
magentoeq2.3.6
magentoeq2.3.6

Name	Operator	Version
magento	lt	2.3.6
magento	lt	2.3.6
magento	eq	2.4.1
magento	eq	2.4.1
magento	eq	2.4.0
magento	eq	2.4.0 p1
magento	eq	2.4.0
magento	eq	2.4.0 p1
magento	eq	2.3.6
magento	eq	2.3.6

References

helpx.adobe.com/security/products/magento/apsb21-08.html

6.1 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON

Related for PRION:CVE-2021-21031