CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Authorize.Net CIM for WooCommerce: from n/a through <= 2.1.2.
Explanation of Vulnerability in Simple Terms
The Payment Gateway Authorize.Net CIM for WooCommerce plugin through version 2.1.2 lacks proper authorization checks on certain functions. A logged-in user with low privileges can trigger actions they should not have access to, potentially disrupting the site's availability. Update to a version newer than 2.1.2 to resolve this issue.
What an attacker can do
A low-privilege logged-in user can perform unauthorized actions that disrupt site availability.
Potential impact on your site
Authenticated users can cause denial of service or disrupt payment processing without proper authorization.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or customer role).
Key dates
External resources
Related vulnerabilities
