Lucene search
Veracode Vulnerability DatabaseVERACODE:25789HistoryJun 29, 2020 - 5:52 a.m.
Signature Verification Bypass
2020-06-2905:52:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
46.3%
magento/community-edition is vulnerable to signature verification bypass. It is possible because of observable timing discrepancy.
| CPE | Name | Operator | Version |
|---|---|---|---|
| magento/community-edition | eq | 2.3.5 | |
| magento/community-edition | le | 2.2.11 | |
| magento/community-edition | le | 2.3.4 |
Related
osv
osv
CVE-2020-9588
2020-06-26 21:15:17
BIT-magento-2020-9588
2024-03-06 11:03:48
Magento Signature verification bypass
2022-05-24 17:21:49
nvd
nvd
CVE-2020-9588
2020-06-26 21:15:17
github
github
Magento Signature verification bypass
2022-05-24 17:21:49
cvelist
cvelist
CVE-2020-9588
2020-06-26 20:20:53
prion
prion
Security feature bypass
2020-06-26 21:15:00
cve
cve
CVE-2020-9588
2020-06-26 21:15:17
openvas
openvas
Magento Multiple Vulnerabilities (APSB20-22)
2020-05-04 00:00:00
adobe
adobe
APSB20-22 Security updates available for Magento
2020-04-28 00:00:00