CVE-2000-0123: High severity FileMaker Filemaker vulnerability
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
FileMaker shopping cart applicationfrom your environment.Uninstall or disable the bundled shopping cart application if it is not required.
- Configuration
Do not rely on hidden form fields for sensitive purchase information. Store sensitive data (prices, totals, payment-related info) on the server side (session or database), recompute prices/totals server-side, and validate or ignore any client-supplied values.
FileMaker shopping cart application use_hidden_form_fields_for_sensitive_purchase_data = false
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0123?
The severity of CVE-2000-0123 is considered to be high due to its potential impact on sensitive purchase information.
How do I fix CVE-2000-0123?
To fix CVE-2000-0123, ensure that you validate and sanitize all user inputs in the shopping cart application.
What types of systems are affected by CVE-2000-0123?
CVE-2000-0123 affects the shopping cart application in Filemaker Pro and related versions.
Can CVE-2000-0123 lead to data breaches?
Yes, CVE-2000-0123 can lead to data breaches by allowing unauthorized modifications to sensitive purchase data.
Is there a patch available for CVE-2000-0123?
There is no specific patch for CVE-2000-0123, but applying best practices in input validation can mitigate the risk.