CVE-2016-1200 The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-11...
MediumCVSS 6.3
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lockon ec-cube | = 3.0.7 | No fix listed |
| lockon ec-cube | = 3.0.8 | No fix listed |
| lockon ec-cube | = 3.0.9 | No fix listed |
References
- JVN#11458774 third-party-advisory vendor-advisory
- JVNDB-2016-000052 third-party-advisory vendor-advisory
- www.ec-cube.net vendor-advisory
- 90503 vdb-entry
- www.ec-cube.net patch vendor-advisory