CVE-2021-21012
Published Jan 13, 2021
Last updated a year ago
Overview
- Description
- Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.
- Source
- psirt@adobe.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Secondary
- Base score
- 5.3
- Impact score
- 1.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DC7DD78-8F03-48F0-B0B9-CFA2A5688C68", "versionEndIncluding": "2.3.6" }, { "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "929B3E3E-C779-4450-B44A-558A8B558C25" }, { "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.0:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E2DABEE-A259-44AC-894F-030F8B208D2A" }, { "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE41A2C2-4A58-4AF4-BC43-42DB7E33933C" }, { "criteria": "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F4D60F4-33B9-40FE-B165-C049014C49E5", "versionEndIncluding": "2.3.6" }, { "criteria": "cpe:2.3:a:adobe:magento_open_source:2.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1B94967-3ADF-4C8E-81B8-BB3D506F415E" }, { "criteria": "cpe:2.3:a:adobe:magento_open_source:2.4.0:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B32F980-5FA7-455F-8DC0-E6484CD72096" }, { "criteria": "cpe:2.3:a:adobe:magento_open_source:2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65174537-3A50-4E08-9CBE-9D84B4CC414B" } ], "operator": "OR" } ] } ]