CVE-2020-4074CWE-287

Improper Authentication

High · published July 2, 2020

CVSS v3.1
8.9
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.

The record
Technical detail
CVSS v3.1
8.9 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01761 · 77.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2020-07-02T17:05Z
EPSS history
Timeline
  • 02 JUL 17:05Z
    Improper Authentication
    cvelistv5