8.8

CVE-2015-6497

Exploit

The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.

Data is provided by the National Vulnerability Database (NVD)
Magento ≫ Magento SwEditioncommunity Version < 1.9.2.1
   Php ≫ Php Version < 5.4.24
   Php ≫ Php Version >= 5.4.25 < 5.5.8
Magento ≫ Magento SwEditionenterprise Version < 1.14.2.1
   Php ≫ Php Version < 5.4.24
   Php ≫ Php Version >= 5.4.25 < 5.5.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.67% 0.853
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://karmainsecurity.com/KIS-2015-04
Third Party Advisory
Exploit
http://seclists.org/fulldisclosure/2015/Sep/48
Third Party Advisory
Exploit
Mailing List