Vulnerabilities > CVE-2020-10591 - Unspecified vulnerability in Walmart Concord

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

walmart

NVD

Published: 2020-03-15

Updated: 2024-11-21

Summary

An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via api/v1/apikey.

Vulnerable Configurations

Part	Description	Count
Application	Walmart Walmart Concord - Walmart Concord 0.1.0 Walmart Concord 0.2.0 Walmart Concord 0.2.1 Walmart Concord 0.3.0 Walmart Concord 0.3.1 Walmart Concord 0.3.2 Walmart Concord 0.4.0 Walmart Concord 0.4.1 Walmart Concord 0.5.0 Walmart Concord 0.5.1 Walmart Concord 0.6.0 Walmart Concord 0.7.0 Walmart Concord 0.8.0 Walmart Concord 0.8.2 Walmart Concord 0.9.0 Walmart Concord 0.10.0 Walmart Concord 0.11.0 Walmart Concord 0.11.1 Walmart Concord 0.11.2 Walmart Concord 0.12.0 Walmart Concord 0.13.0 Walmart Concord 0.14.0 Walmart Concord 0.14.1 Walmart Concord 0.15.0 Walmart Concord 0.16.0 Walmart Concord 0.17.0 Walmart Concord 0.17.2 Walmart Concord 0.17.3 Walmart Concord 0.18.0 Walmart Concord 0.19.0 Walmart Concord 0.20.0 Walmart Concord 0.20.1 Walmart Concord 0.22.0 Walmart Concord 0.23.0 Walmart Concord 0.24.0 Walmart Concord 0.25.0 Walmart Concord 0.26.0 Walmart Concord 0.27.0 Walmart Concord 0.28.0 Walmart Concord 0.28.1 Walmart Concord 0.28.2 Walmart Concord 0.28.3 Walmart Concord 0.29.0 Walmart Concord 0.30.0 Walmart Concord 0.30.1 Walmart Concord 0.31.0 Walmart Concord 0.32.0 Walmart Concord 0.33.0 Walmart Concord 0.34.0 Walmart Concord 0.34.1 Walmart Concord 0.35.0 Walmart Concord 0.36.0 Walmart Concord 0.37.0 Walmart Concord 0.38.0 Walmart Concord 0.38.3 Walmart Concord 0.39.0 Walmart Concord 0.40.2 Walmart Concord 0.41.0 Walmart Concord 0.42.0 Walmart Concord 0.43.0 Walmart Concord 0.44.0 Walmart Concord 0.44.1 Walmart Concord 0.45.0 Walmart Concord 0.45.1 Walmart Concord 0.46.0 Walmart Concord 0.47.0 Walmart Concord 0.48.0 Walmart Concord 0.48.1 Walmart Concord 0.48.2 Walmart Concord 0.49.0 Walmart Concord 0.50.0 Walmart Concord 0.51.0 Walmart Concord 0.52.0 Walmart Concord 0.53.0 Walmart Concord 0.54.0 Walmart Concord 0.55.0 Walmart Concord 0.56.0 Walmart Concord 0.57.0 Walmart Concord 0.58.0 Walmart Concord 0.59.0 Walmart Concord 0.60.0 Walmart Concord 0.61.0 Walmart Concord 0.61.1 Walmart Concord 0.63.0 Walmart Concord 0.63.1 Walmart Concord 0.64.0 Walmart Concord 0.65.1 Walmart Concord 0.65.2 Walmart Concord 0.65.3 Walmart Concord 0.66.0 Walmart Concord 0.67.0 Walmart Concord 0.68.0 Walmart Concord 0.68.1 Walmart Concord 0.68.2 Walmart Concord 0.69.0 Walmart Concord 0.70.0 Walmart Concord 0.71.0 Walmart Concord 0.71.1 Walmart Concord 0.71.2 Walmart Concord 0.71.3 Walmart Concord 0.72.0 Walmart Concord 0.73.0 Walmart Concord 0.74.0 Walmart Concord 0.75.0 Walmart Concord 0.76.0 Walmart Concord 0.77.0 Walmart Concord 0.78.0 Walmart Concord 0.78.1 Walmart Concord 0.79.0 Walmart Concord 0.79.1 Walmart Concord 0.79.2 Walmart Concord 0.80.0 Walmart Concord 0.81.0 Walmart Concord 0.82.0 Walmart Concord 0.83.0 Walmart Concord 0.83.1 Walmart Concord 0.84.0 Walmart Concord 0.84.1 Walmart Concord 0.85.0 Walmart Concord 0.86.0 Walmart Concord 0.87.0 Walmart Concord 0.88.0 Walmart Concord 0.88.1 Walmart Concord 0.88.2 Walmart Concord 0.89.0 Walmart Concord 0.89.1 Walmart Concord 0.89.2 Walmart Concord 0.89.3 Walmart Concord 0.90.0 Walmart Concord 0.91.0 Walmart Concord 0.92.0 Walmart Concord 0.93.0 Walmart Concord 0.93.1 Walmart Concord 0.94.0 Walmart Concord 0.95.0 Walmart Concord 0.96.0 Walmart Concord 0.97.0 Walmart Concord 0.98.0 Walmart Concord 0.98.1 Walmart Concord 0.99.0 Walmart Concord 0.99.1 Walmart Concord 1.0.0 Walmart Concord 1.1.0 Walmart Concord 1.2.0 Walmart Concord 1.2.1 Walmart Concord 1.2.2 Walmart Concord 1.3.0 Walmart Concord 1.4.0 Walmart Concord 1.5.0 Walmart Concord 1.6.0 Walmart Concord 1.7.0 Walmart Concord 1.7.1 Walmart Concord 1.7.2 Walmart Concord 1.8.0 Walmart Concord 1.8.1 Walmart Concord 1.9.0 Walmart Concord 1.10.0 Walmart Concord 1.11.0 Walmart Concord 1.12.0 Walmart Concord 1.13.0 Walmart Concord 1.13.1 Walmart Concord 1.14.0 Walmart Concord 1.15.0 Walmart Concord 1.16.0 Walmart Concord 1.16.1 Walmart Concord 1.17.0 Walmart Concord 1.18.0 Walmart Concord 1.18.1 Walmart Concord 1.19.0 Walmart Concord 1.19.1 Walmart Concord 1.20.0 Walmart Concord 1.20.1 Walmart Concord 1.21.0 Walmart Concord 1.22.0 Walmart Concord 1.23.0 Walmart Concord 1.24.0 Walmart Concord 1.24.1 Walmart Concord 1.24.2 Walmart Concord 1.25.0 Walmart Concord 1.26.0 Walmart Concord 1.27.0 Walmart Concord 1.28.0 Walmart Concord 1.28.1 Walmart Concord 1.29.0 Walmart Concord 1.30.0 Walmart Concord 1.31.0 Walmart Concord 1.31.1 Walmart Concord 1.32.0 Walmart Concord 1.33.0 Walmart Concord 1.34.0 Walmart Concord 1.34.1 Walmart Concord 1.34.2 Walmart Concord 1.34.3 Walmart Concord 1.35.0 Walmart Concord 1.35.1 Walmart Concord 1.36.0 Walmart Concord 1.36.1 Walmart Concord 1.37.0 Walmart Concord 1.37.1 Walmart Concord 1.38.0 Walmart Concord 1.38.1 Walmart Concord 1.38.2 Walmart Concord 1.39.3 Walmart Concord 1.40.0 Walmart Concord 1.41.0 Walmart Concord 1.42.0 Walmart Concord 1.43.0	208

Summary

Vulnerable Configurations

References