CVE-2020-5777 Authentication bypass in MAGMI
Remote attackers can bypass authentication in MAGMI by triggering database connection failures to exploit default credentials, requiring specific server configuration mismatches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-5777?
CVE-2020-5777 is a critical authentication bypass vulnerability in MAGMI, published on 1 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting max_connections (default 151) is lower than Apache (or another web server) setting MaxRequestWorkers (formerly MaxClients) (default 256). This can be done by sending at least 151 simultaneous requests to the Magento website to trigger a "Too many connections" error, then use default magmi:magmi basic authentication to remotely bypass authentication.
Weakness: CWE-287
Which versions are affected by CVE-2020-5777?
2 open source packages ship an affected version, including dweeves/magmi. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
dweeves/magmi Packagist | All versions | 0.7.24 |
dweeves/magmi Packagist | All versions | 0.7.24 |
Products include Magmi Project Magmi.
How do I fix CVE-2020-5777?
Upgrade dweeves/magmi to 0.7.24 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-5777 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-5777 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in MAGMI
Sources
Also known as GHSA-g475-pch5-6wvv.