CVE Vulnerabilities

CVE-2013-6295

Improper Privilege Management

Published: Feb 18, 2020 | Modified: Feb 21, 2020
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Prestashop Prestashop 1.5.5.0 (including) 1.5.5.0 (including)

Potential Mitigations

References