Lucene search
Veracode Vulnerability DatabaseVERACODE:21199HistoryAug 13, 2019 - 6:29 a.m.
Authorization Bypass
2019-08-1306:29:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
0.001 Low
EPSS
Percentile
49.7%
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information.
Related
prion
prion
Improper access control
2019-08-02 22:15:00
cvelist
cvelist
CVE-2019-7950
2019-08-02 21:35:49
cve
cve
CVE-2019-7950
2019-08-02 22:15:19
friendsofphp
friendsofphp
PRODSECBUG-2429: Insecure object reference via customer REST API
2019-06-25 00:00:00
osv
osv
Magento 2 Community Edition Access Control Bypass
2022-05-24 16:52:29
CVE-2019-7950
2019-08-02 22:15:19
nvd
nvd
CVE-2019-7950
2019-08-02 22:15:19
github
github
Magento 2 Community Edition Access Control Bypass
2022-05-24 16:52:29
openvas
openvas