CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Improper Access Control
Summary: insufficient enforcement of user access controls in magento 2.1 prior to 2.1.18, magento 2.2 prior to 2.2.9, magento 2.3 prior to 2.3.2 could enable a low-privileged user to make unauthorized environment configuration changes.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/PARTIAL
Published Date: 2019-08-02
Last Modified Date: 2019-08-09