PT-2021-14233 · Ec Cube · Ec-Cube

Published 2021-07-01 · Updated 2021-07-08 · CVE-2021-20778

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: EC-CUBE version 4.0.6

Description: The issue is related to improper access control, allowing a remote attacker to bypass access restrictions and obtain sensitive information.

Recommendations: For EC-CUBE version 4.0.6, update to a version that addresses the improper access control issue to prevent unauthorized access to sensitive information.

Fix

Related Identifiers

CVE-2021-20778

Affected Products

Ec-Cube

References · 5

• https://ec-cube.net/info/weakness/weakness.php?id=80 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20778 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20778 · Security Note
• http://jvn.jp/en/jp/JVN57942445/index.html · Note
• https://jvn.jp/en/jp/JVN57942445/index.html · Note