PT-2017-15204 · Cs Cart · Cs-Cart Japanese Edition+1

廣田一貴 · Publicado 2017-04-28 · Atualizado 2019-10-03 · CVE-2017-2139

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3) CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3)

Description The issue allows remote attackers to bypass access restrictions and obtain customer information. This is achieved via the orders.pre.php file.

Recommendations For CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available. For CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier (excluding v2 and v3), restrict access to the orders.pre.php file until a fix is available.

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2017-2139

Produtos afetados

Cs-Cart Japanese Edition

Cs-Cart Multivendor Japanese Edition

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2139 · Nota de Segurança
• http://jvn.jp/en/jp/JVN14396697/index.html · Nota
• https://osv.dev/vulnerability/CVE-2017-2139 · Aviso do Fabricante
• http://tips.cs-cart.jp/fix-jvn-14396697.html · Aviso do Fabricante