CVE-2020-15102CWE-284

Improper access control on dashboard form in PrestaShop

Medium · published July 21, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-07-21T17:50Z
EPSS history
Timeline
  • 21 JUL 17:50Z
    Improper access control on dashboard form in PrestaShop
    cvelistv5