CVE-2020-15085 : In Saleor Storefront before version 2.10.3, request data used to authenticate cu

In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with direct access to the browser could extract the email and password. In versions prior to 2.10.0 persisted the cache even after the user logged out. This is fixed in version 2.10.3. A workaround is to manually clear application data (browser's local storage) after logging into Saleor Storefront.

Published 2020-06-30 17:15:11

Updated 2020-07-28 15:46:00

Source GitHub, Inc.

View at NVD, CVE.org

Products affected by CVE-2020-15085

Mirumee » Saleor
Versions before (<) 2.10.3
cpe:2.3:a:mirumee:saleor:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-15085

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 14 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-15085

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
6.1	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N	1.8	4.2	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: Low Availability: None
6.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N	1.6	4.7	GitHub, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: Low Availability: None

CWE ids for CVE-2020-15085

CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Assigned by: security-advisories@github.com (Primary)

References for CVE-2020-15085

https://github.com/mirumee/saleor-storefront/blob/master/CHANGELOG.md#2103

saleor-storefront/CHANGELOG.md at master · mirumee/saleor-storefront · GitHub
Release Notes;Third Party Advisory
https://github.com/mirumee/saleor-storefront/security/advisories/GHSA-4279-h39w-2jqm

Client caching login operation with plaintext password · Advisory · mirumee/saleor-storefront · GitHub
Third Party Advisory
https://github.com/mirumee/saleor-storefront/commit/7c331e1be805022c9a7be719bd69d050b2577458

Merge pull request from GHSA-4279-h39w-2jqm · mirumee/saleor-storefront@7c331e1 · GitHub
Patch;Third Party Advisory

Jump to

Vulnerability Details : CVE-2020-15085

Products affected by CVE-2020-15085

Exploit prediction scoring system (EPSS) score for CVE-2020-15085

CVSS scores for CVE-2020-15085

CWE ids for CVE-2020-15085

References for CVE-2020-15085