CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerab...

Original description

The description as published by the source.

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami magento

[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.12"},{"introduced":"2.3.0"},{"fixed":"2.3.5"}]}]

References

advisory helpx.adobe.com
web nvd.nist.gov