Test ID:	1.3.6.1.4.1.25623.1.0.807532
Category:	Web application abuses
Title:	Magento RSS Feed Information Disclosure Vulnerability
Summary:	Magento Web E-Commerce Platform is prone to an information disclosure vulnerability.
Description:	Summary: Magento Web E-Commerce Platform is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an unsafe way of comparing 'increment_id' and 'customer_id' parameters in the 'getOrderByStatusUrlKey' method of the 'Mage_Rss_Helper_Order' class in the '/app/code/core/Mage/Rss/Helper/Order.php' script. Vulnerability Impact: Successful exploitation will allow remote attackers to download order comments and other order-related information. Affected Software/OS: Magento CE 1.9.2.2 and prior versions. Solution: Update to Magento CE 1.9.2.3 or later or apply the SUPEE-7405 patch bundle available at the references. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2212 Bugtraq: 20160224 [KIS-2016-02] Magento <= 1.9.2.2 (RSS Feed) Information Disclosure Vulnerability (Google Search) http://www.securityfocus.com/archive/1/537601/100/0/threaded http://seclists.org/fulldisclosure/2016/Feb/105 http://karmainsecurity.com/KIS-2016-02 http://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.