CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability

published June 26, 2020

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05009 · 92.2th percentile
Published
2020-06-26T20:19Z
EPSS history
Timeline
  • 26 JUN 20:19Z
    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability
    cvelistv5