Magento Mass Importer <0.7.24 - Remote Auth Bypass Detection

Magento Mass Importer aka MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. !/usr/bin/env python3 -- coding: utf-8 -- """Magento Mass Importer aka MAGMI versions prior to 0."""...

CVE-2020-5777

MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting maxconnections default 151 is lower than Apache or...

PT-2020-18698

Name of the Vulnerable Software and Affected Versions MAGMI versions prior to 0.7.24 Description The issue allows for a remote authentication bypass due to the use of default credentials when a database connection failure occurs. This failure can be triggered by a remote attacker by sending...