medium5.0
CVE-2015-3457
Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.
Impact
Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magento | Magento | Versions 1.9.1.0, 1.14.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/
- http://magento.com/blog/technical/critical-security-advisory-remote-code-execution-rce-vulnerability
- http://www.securityfocus.com/bid/74420
- http://www.securitytracker.com/id/1032230
- http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/
- http://magento.com/blog/technical/critical-security-advisory-remote-code-execution-rce-vulnerability
- http://www.securityfocus.com/bid/74420
- http://www.securitytracker.com/id/1032230