"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-03-05 18:01:17 +00:00
parent a26455d588
commit 401b6140e2
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
2 changed files with 7 additions and 4 deletions

View File

@ -4,7 +4,8 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-14886",
"ASSIGNER": "mrehak@redhat.com"
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
@ -49,7 +50,9 @@
"refsource": "CONFIRM"
},
{
"url": "https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ"
"url": "https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ",
"refsource": "MISC",
"name": "https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/jbpm-usage/74pSuwfGKRU/0oXpmRScBQAJ"
}
]
},

View File

@ -35,7 +35,7 @@
"description_data": [
{
"lang": "eng",
"value": "In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form,\nand thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change\nall information of all accounts.\n\nThe problem is patched in version 1.7.6.4."
"value": "In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4."
}
]
},