CVE-2021-20778: High severity ec-cube amazon pay vulnerability
Published Jul 1, 2021
·Updated
Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified vectors.
Affected Software
2 affected componentsFixes available
composer/ec-cube/ec-cube>4.0.5-p1<4.0.6-p1
4.0.6-p1
EC-CUBE EC-CUBE=4.0.6
Remediation
Patch Available
Event History
Jul 1, 2021
CVE Published
via MITRE·05:45 AM
Data Sourced
via MITRE·05:45 AM
DescriptionWeakness
May 24, 2022
Advisory Published
via GitHub·07:06 PM
Frequently Asked Questions
1
What is CVE-2021-20778?
CVE-2021-20778 is an improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series).
2
How does CVE-2021-20778 affect EC-CUBE?
CVE-2021-20778 allows a remote attacker to bypass access restriction and obtain sensitive information in EC-CUBE 4.0.6.
3
What is the severity of CVE-2021-20778?
The severity of CVE-2021-20778 is rated as high with a CVSS score of 7.5.
4
How can an attacker exploit CVE-2021-20778?
An attacker can exploit CVE-2021-20778 by leveraging unspecified vectors to bypass access restriction and obtain sensitive information.
5
Is there a fix for CVE-2021-20778?
Yes, EC-CUBE has released information about the vulnerability and how to mitigate it on their website.