2021-01-02 04:56:15 +00:00
id : CVE-2020-5777
2020-09-04 13:02:17 +00:00
info :
2022-04-29 19:58:07 +00:00
name : Magento Mass Importer <0.7.24 - Remote Auth Bypass
2021-02-05 19:44:41 +00:00
author : dwisiswant0
2021-09-10 11:26:40 +00:00
severity : critical
2022-05-17 09:18:12 +00:00
description : Magento Mass Importer (aka MAGMI) versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure.
2023-09-06 12:22:36 +00:00
remediation : |
Upgrade to version 0.7.24 or later to fix the authentication bypass vulnerability.
2022-04-22 10:38:41 +00:00
reference :
- https://github.com/dweeves/magmi-git/blob/18bd9ec905c90bfc9eaed0c2bf2d3525002e33b9/magmi/inc/magmi_auth.php#L35
2022-04-29 19:58:07 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2020-5777
2022-05-17 09:18:12 +00:00
- https://www.tenable.com/security/research/tra-2020-51
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2020-5777
cwe-id : CWE-287
2023-10-19 10:38:59 +00:00
epss-score : 0.02889
2023-11-05 22:23:39 +00:00
epss-percentile : 0.89658
2023-09-06 12:22:36 +00:00
cpe : cpe:2.3:a:magmi_project:magmi:*:*:*:*:*:*:*:*
2022-06-15 19:57:23 +00:00
metadata :
2023-04-28 08:11:21 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : magmi_project
product : magmi
2023-09-06 12:22:36 +00:00
shodan-query : http.component:"Magento"
2022-08-27 04:41:18 +00:00
tags : plugin,tenable,cve,cve2020,magmi,magento,auth,bypass
2020-09-04 13:02:17 +00:00
2023-04-27 04:28:59 +00:00
http :
2020-09-04 13:02:17 +00:00
- raw :
- |
GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1
Host : {{Hostname}}
Connection : close
2021-02-05 19:44:41 +00:00
2020-09-04 13:02:17 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2020-09-04 13:02:17 +00:00
words :
- "Too many connections"
2023-07-11 19:49:27 +00:00
2020-09-04 13:02:17 +00:00
- type : status
status :
- 503
2023-11-06 06:48:30 +00:00
# digest: 4a0a00473045022100abde4dcc7ba72f9655a825693073d15fcc3984eb4a0940e8c5abe978144798c0022011bd86a2a01fd05df76a0bd0d166d29158912882eafe96b8eb77b9040f1a8196:922c64590222798bb761d5b6d8e72950