← CVE Intelligence

CVE-2021-20841

EC-CUBE CO.,LTD. / EC-CUBE 2 series PUBLISHED

Description (CNA)

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.

Affected (CNA)

Vendor / productVersions
EC-CUBE CO.,LTD. / EC-CUBE 2 seriesaffected 2.11.2 to 2.17.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.