Lucene search
Veracode Vulnerability DatabaseVERACODE:37013HistorySep 13, 2022 - 6:38 a.m.
Information Disclosure
2022-09-1306:38:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
shopware security customer-info unauthorized-access
0.001 Low
EPSS
Percentile
44.6%
shopware/shopware is vulnerable to information disclosure. The vulnerability exists in getCustomer function in Customer.php because the hashed passwords and session IDs are exposed in the customer detail view which allows an attacker to gain access to sensitive information and perform unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shopware/shopware | le | v5.7.14 | |
| shopware/shopware | le | v5.7.14 |
Related
cve
cve
CVE-2022-36101
2022-09-12 20:15:12
github
github
Shopware contains sensitive data in backend customer module
2022-09-16 21:02:55
prion
prion
Design/Logic Flaw
2022-09-12 20:15:00
osv
osv
Shopware contains sensitive data in backend customer module
2022-09-16 21:02:55
nvd
nvd
CVE-2022-36101
2022-09-12 20:15:12
cvelist
cvelist
CVE-2022-36101 Sensitive data in backend customer module
2022-09-12 20:00:16