Lucene search
Veracode Vulnerability DatabaseVERACODE:25786HistoryJun 29, 2020 - 5:31 a.m.
Authorization Bypass
2020-06-2905:31:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
50.0%
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as its defense-in-depth security mitigation does not restrict unauthorized access to the admin panel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| magento/community-edition | eq | 2.3.5 | |
| magento/community-edition | le | 2.3.4 |
Related
osv
osv
CVE-2020-9591
2020-06-26 21:15:17
BIT-magento-2020-9591
2024-03-06 11:03:37
Magento defense-in-depth security mitigation vulnerability
2022-05-24 17:21:50
nvd
nvd
CVE-2020-9591
2020-06-26 21:15:17
github
github
Magento defense-in-depth security mitigation vulnerability
2022-05-24 17:21:50
cve
cve
CVE-2020-9591
2020-06-26 21:15:17
prion
prion
Security feature bypass
2020-06-26 21:15:00
cvelist
cvelist
CVE-2020-9591
2020-06-26 20:20:16
openvas
openvas
Magento Multiple Vulnerabilities (APSB20-22)
2020-05-04 00:00:00
adobe
adobe
APSB20-22 Security updates available for Magento
2020-04-28 00:00:00