{"id":"CVE-2020-9587","state":"PUBLISHED","title":"Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation","description":"Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.","publishedAt":"2020-06-26T20:19:07.000Z","updatedAt":"2024-08-04T10:34:39.469Z","severity":null,"assigner":"adobe","products":["Adobe Magento"],"affected":[{"vendor":"Adobe","product":"Magento","versions":[{"version":"2.3.4 and earlier, 2.2.11 and earlier  (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions","status":"affected"}]}],"references":["https://helpx.adobe.com/security/products/magento/apsb20-22.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:47.279Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/9xxx/CVE-2020-9587.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-9587","state":"PUBLISHED","datePublished":"2020-06-26T20:19:07.000Z","dateUpdated":"2024-08-04T10:34:39.469Z","assignerShortName":"adobe","assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","dateReserved":"2020-03-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts."}],"affected":[{"vendor":"Adobe","product":"Magento","versions":[{"version":"2.3.4 and earlier, 2.2.11 and earlier  (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions","status":"affected"}]}],"references":[{"url":"https://helpx.adobe.com/security/products/magento/apsb20-22.html","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Authorization bypass","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"adobe","dateUpdated":"2020-06-26T20:19:07.000Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@adobe.com","ID":"CVE-2020-9587","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Magento","version":{"version_data":[{"version_value":"2.3.4 and earlier, 2.2.11 and earlier  (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions"}]}}]},"vendor_name":"Adobe"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Authorization bypass"}]}]},"references":{"reference_data":[{"name":"https://helpx.adobe.com/security/products/magento/apsb20-22.html","refsource":"CONFIRM","url":"https://helpx.adobe.com/security/products/magento/apsb20-22.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://helpx.adobe.com/security/products/magento/apsb20-22.html","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:34:39.469Z"}}]}}}