CVE-2021-21026CWE-285

Magento Commerce Incorrect permissions Could Lead To Unauthorized Access

Medium · published February 11, 2021

CVSS v3.0
5.3
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01808 · 78.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-02-11T19:29Z
EPSS history
Timeline
  • 11 FEB 19:29Z
    Magento Commerce Incorrect permissions Could Lead To Unauthorized Access
    cvelistv5