Description
Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.
Unscored
CVE-2015-3457
EUVD-2015-3500GHSA-jgv4-w58m-q2g2
Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forward…
Published Apr 29, 2015 · Updated Aug 6, 2024 · Assigned by mitre