PT-2016-4638

CVE-2016-1200

Published

2016-04-30

Updated

2016-11-28

CVSS 2.0

6.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LOCKON EC-CUBE versions 3.0.7 through 3.0.9

Description The management screen in the affected software allows remote authenticated users to bypass intended access restrictions.

Recommendations For versions 3.0.7 through 3.0.9, update to a version that contains a fix for this issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾