Unscored CVE-2021-20778 EUVD-2021-8190GHSA-4cxm-8hh5-jj33

Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain …

Published Jul 1, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Description

Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
EC-CUBE	EC-CUBE	4.0.6 (EC-CUBE 4 series)	—

References

https://www.ec-cube.net/info/weakness/weakness.php?id=80
https://jvn.jp/en/jp/JVN57942445/index.html
JVN#57942445 third-party-advisory