CVE-2020-15079CWE-284

Improper access control in PrestaShop

Medium · published July 2, 2020

CVSS v3.1
6.4
EPSS
1%
Percentile
46.9
In the wild
Unconfirmed
What it is

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00579 · 46.9th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-07-02T16:45Z
EPSS history
Timeline
  • 02 JUL 16:45Z
    Improper access control in PrestaShop
    cvelistv5