PT-2020-18698 · Magento · Magmi

Published 2020-09-01 · Updated 2021-05-06 · CVE-2020-5777

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MAGMI versions prior to 0.7.24

Description The issue allows for a remote authentication bypass due to the use of default credentials when a database connection failure occurs. This failure can be triggered by a remote attacker by sending simultaneous requests to the Magento website, causing a "Too many connections" error. The attacker can then use default basic authentication to bypass authentication. This can happen when the Mysql setting max connections is lower than the Apache setting MaxRequestWorkers.

Recommendations For MAGMI versions prior to 0.7.24, update to version 0.7.24 or later to resolve the issue. As a temporary workaround, consider increasing the Mysql setting max connections to be equal to or higher than the Apache setting MaxRequestWorkers to prevent the "Too many connections" error. Additionally, restrict access to the default magmi:magmi basic authentication credentials to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-5777

GHSA-G475-PCH5-6WVV

Affected Products

Magmi

References · 6

• https://osv.dev/vulnerability/GHSA-g475-pch5-6wvv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5777 · Security Note
• https://github.com/dweeves/magmi-git/commit/dde71de5cfd505fe78e5caf21d6531b61450a16f · Note
• https://t.me/sysadm_in_channel/2137 · Telegram Post
• https://tenable.com/security/research/tra-2020-51 · Note