PT-2020-14186 · Prestashop · Prestashop Dashboard Productions

Published 2020-07-21 · Updated 2021-10-07 · CVE-2020-15102

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop Dashboard Productions versions prior to 2.1.0

Description The issue is related to improper authorization, allowing an attacker to modify the configuration.

Recommendations For versions prior to 2.1.0, update to version 2.1.0 to resolve the issue.

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

CVE-2020-15102

GHSA-6292-4QPG-HVFG

Affected Products

Prestashop Dashboard Productions

References · 4

• https://github.com/PrestaShop/dashproducts/commit/f0799c13628a9b9ca6ca75c085b083d924a8ea7e · Patch
• https://osv.dev/vulnerability/CVE-2020-15102 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15102 · Security Note
• https://github.com/PrestaShop/dashproducts/security/advisories/GHSA-6292-4qpg-hvfg · Note