CVE-2009-4236: Infoleak
The process function in data/class/pages/admin/customer/LCPageAdminCustomerSearchCustomer.php in EC-CUBE Ver2 2.4.0 RC1 through 2.4.1, and Community Edition r18068 through r18428, allows remote attackers to obtain sensitive information (customer data) via unknown vectors related to sessions.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4236?
CVE-2009-4236 is categorized as a medium severity vulnerability due to the potential exposure of sensitive customer information.
How do I fix CVE-2009-4236?
To mitigate CVE-2009-4236, update your EC-CUBE version to 2.4.2 or later, or apply the recommended security patches.
What types of data are affected by CVE-2009-4236?
CVE-2009-4236 affects sensitive customer data, which could potentially be exposed to unauthorized users.
What versions of EC-CUBE are affected by CVE-2009-4236?
CVE-2009-4236 impacts EC-CUBE versions 2.4.0 RC1, 2.4.1, and Community Edition r18068 through r18428.
Can CVE-2009-4236 lead to a breach of customer data?
Yes, CVE-2009-4236 poses a risk of unauthorized access to customer data, potentially leading to data breaches.