SB2020113030 - Improper access control in Pimcore

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020113030

SB2020113030 - Improper access control in Pimcore

Published: November 30, 2020 Updated: June 12, 2026

Security Bulletin ID SB2020113030
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper access control (CVE-ID: CVE-2020-26246)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to modify website settings, redirects, and asset metadata without appropriate permissions.

The vulnerability exists due to improper access control in website settings, redirects, and asset metadata management functionality when handling modification and creation requests. A remote user can send crafted requests to modify website settings, redirects, and asset metadata without appropriate permissions.


Remediation

Install update from vendor's website.

References