CVE-2016-1200: Medium severity ec-cube vulnerability
Published Apr 30, 2016
·Updated
The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.
Affected Software
3 affected components
LOCKON EC-CUBE=3.0.7
LOCKON EC-CUBE=3.0.8
LOCKON EC-CUBE=3.0.9
Remediation
Patch Available
Event History
Apr 30, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1200?
CVE-2016-1200 is classified as a medium severity vulnerability.
2
How do I fix CVE-2016-1200?
To resolve CVE-2016-1200, upgrade your LOCKON EC-CUBE installation to version 3.0.10 or later.
3
Who is affected by CVE-2016-1200?
CVE-2016-1200 affects users of LOCKON EC-CUBE versions 3.0.7, 3.0.8, and 3.0.9.
4
What type of vulnerability is CVE-2016-1200?
CVE-2016-1200 is an access control vulnerability that allows remote authenticated users to bypass restrictions.
5
When was CVE-2016-1200 disclosed?
CVE-2016-1200 was disclosed in January 2016.