PT-2020-20301 · Magento+1 · Magento 2+1
633Kh4Ck
·
Published
2020-02-25
·
Updated
2021-10-12
·
CVE-2020-8818
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
CardGate Payments plugin versions through 2.0.30 for Magento 2
Description
The issue is related to the lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php. This allows an attacker to remotely replace critical plugin settings, such as
merchant ID and secret key, and bypass the payment process. For example, an attacker can spoof an order status by manually sending an IPN callback request with a valid signature but without real payment, and/or receive all of the subsequent payments.Recommendations
For CardGate Payments plugin versions through 2.0.30, consider disabling the IPN callback processing function in Controller/Payment/Callback.php until a patch is available to prevent remote replacement of critical plugin settings. Restrict access to the
Callback.php file to minimize the risk of exploitation. Avoid using the IPN callback request with a valid signature but without real payment until the issue is resolved.Exploit
Fix
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cardgate Payments Plugin
Magento 2