Origin validation error in CardGate module for Magento 2 - CVE-2020-8818

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU25725

Origin validation error in CardGate module for Magento 2 - CVE-2020-8818

Published: March 2, 2020 / Updated: June 17, 2021


Vulnerability identifier: #VU25725
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2020-8818
CWE-ID: CWE-346
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: CardGate
Affected software:
CardGate module for Magento 2

Detailed vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to a lack of origin authentication at IPN callback processing function in "Controller/Payment/Callback.php" file. A remote attacker can replace critical plugin settings (merchant id, secret key etc) with known to him and therefore bypass payment process (eg. spoof order status by manually sending IPN callback request with a valid signature but without real payment) and/or receive all subsequent payments (on behalf of the store).

How to mitigate CVE-2020-8818

Install updates from vendor's website.

Sources