CVE-2021-20841: Medium severity ec-cube amazon pay vulnerability
Published Nov 24, 2021
·Updated
Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.
Affected Software
2 affected componentsFixes available
composer/ec-cube/ec-cube>=2.11.2<=2.17.1
2.17.2
EC-CUBE EC-CUBE>=2.11.2<=2.17.1
Remediation
Patch Available
Event History
Nov 24, 2021
CVE Published
via MITRE·08:25 AM
Data Sourced
via MITRE·08:25 AM
DescriptionWeakness
Nov 25, 2021
Advisory Published
via GitHub·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-20841.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote attacker to bypass access restriction and alter System settings.'
3
What is the severity of CVE-2021-20841?
The severity of CVE-2021-20841 is medium with a CVSS score of 6.5.
4
What software versions are affected by CVE-2021-20841?
EC-CUBE 2 series versions 2.11.2 to 2.17.1 are affected by CVE-2021-20841.
5
How can an attacker exploit CVE-2021-20841?
A remote authenticated attacker can exploit CVE-2021-20841 to bypass access restrictions and alter system settings via unspecified vectors.