CVE-2021-20841
Assigner: jpcert
Published: 2021-11-24T08:25:41
State: PUBLISHED
affected: product: EC-CUBE 2 series
vendor: EC-CUBE CO.,LTD.
versions: status: affected
version: 2.11.2 to 2.17.1
descriptions: value: Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.
problemTypes: descriptions: description: Fails to restrict access
type: text