CVE-2014-0807: Medium severity LOCKON EC-CUBE vulnerability
Published Jan 22, 2014
·Updated
data/class/pages/shopping/LCPageShoppingDeliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors.
Affected Software
17 affected components
LOCKON EC-CUBE<=2.4.4
LOCKON EC-CUBE=2.4.0
LOCKON EC-CUBE=2.4.0-rc1
LOCKON EC-CUBE=2.4.1
LOCKON EC-CUBE=2.4.2
LOCKON EC-CUBE=2.4.3
LOCKON EC-CUBE=2.11.0
LOCKON EC-CUBE=2.11.0-beta
LOCKON EC-CUBE=2.11.0-beta2
LOCKON EC-CUBE=2.11.1
LOCKON EC-CUBE=2.11.2
LOCKON EC-CUBE=2.11.3
LOCKON EC-CUBE=2.11.4
LOCKON EC-CUBE=2.11.5
LOCKON EC-CUBE=2.12.0
LOCKON EC-CUBE=2.12.1
LOCKON EC-CUBE=2.12.2
Event History
Jan 22, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0807?
CVE-2014-0807 is considered a medium severity vulnerability due to the potential for remote data modification.
2
How do I fix CVE-2014-0807?
To fix CVE-2014-0807, upgrade to LOCKON EC-CUBE version 2.4.5 or later, or 2.12.3 or later.
3
What versions of LOCKON EC-CUBE are affected by CVE-2014-0807?
CVE-2014-0807 affects LOCKON EC-CUBE versions up to 2.4.4 and versions 2.11.0 through 2.12.2.
4
What types of attacks can CVE-2014-0807 enable?
CVE-2014-0807 can enable attackers to modify data remotely without appropriate authorization.
5
Is there a workaround for CVE-2014-0807 while waiting for a patch?
Currently, there is no documented workaround for CVE-2014-0807; immediate upgrading is advised.