CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@adobe.com

Published

2020-06-26

Last modified

2024-08-04

Affected products

• Magento (Adobe)
• Magento (Magento)

References

• https://helpx.adobe.com/security/products/magento/apsb20-22.html