CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy…

published June 26, 2020

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02924 · 87.0th percentile
Published
2020-06-26T20:20Z
EPSS history
Timeline
  • 26 JUN 20:20Z
    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy…
    cvelistv5