Miggo Logo
Miggo Vulnerability Database
→
CVE-2022-34256

CVE-2022-34256: Magento Improper Authorization vulnerability

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2022-34256
GHSA ID
GHSA-r7mm-grf3-5fjv
EPSS Score
0.66572%
CWE
CWE-285
Published
8/17/2022
Updated
1/11/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer>= 2.3.0, < 2.3.7-p42.3.7-p4
magento/community-editioncomposer>= 2.4.4, < 2.4.52.4.5
magento/community-editioncomposer>= 2.4.0, < 2.4.3-p32.4.3-p3

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**o** *omm*r** v*rsions *.*.*-p* (*n* **rli*r), *.*.*-p* (*n* **rli*r) *n* *.*.* (*n* **rli*r) *r* *****t** *y *n Improp*r *ut*oriz*tion vuln*r**ility t**t *oul* r*sult in Privil*** *s**l*tion. *n *tt**k*r *oul* l*v*r*** t*is vuln*r**ility to ****ss

Reasoning

No *n*lysis *v*il**l*