SB2023032902 - Authentication bypass in Automattic WooCommerce Payments for WordPress

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Authentication (CVE-ID: N/A)

CWE-ID: CWE-287 - Improper Authentication

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Red

The vulnerability allows a remote attacker to compromise the affected application.

The vulnerability exists due to an error in the authentication process, related to the determine_current_user_for_platform_checkout() function. A remote non-authenticated attacker can bypass authentication process and gain administrative access to the web application.

Note, the vulnerability is being actively exploited in the wild.

Remediation

Install update from vendor's website.

References

• https://developer.woocommerce.com/2023/03/23/critical-vulnerability-detected-in-woocommerce-payments-what-you-need-to-know/
• https://bitfire.co/vulnerabilities/woocommerce-payments-plugin-hacked-exploiting-critical-authentication-bypass