CVE-2020-15079: 
Prestashop vulnerability analysis and mitigation

CVE-2020-15079 is a security vulnerability affecting PrestaShop versions from 1.5.0.0 and before version 1.7.6.6. The vulnerability involves improper access control in multiple components including the Carrier page, Module Manager, and Module Positions (GitHub Advisory).

The vulnerability is classified as an improper access control issue (CWE-284). It affects multiple administrative interfaces within PrestaShop, specifically the Carrier page, Module Manager, and Module Positions components. The severity is rated as Moderate (GitHub Advisory).

The vulnerability could allow unauthorized access to administrative functions within PrestaShop's Carrier page, Module Manager, and Module Positions. This could potentially lead to unauthorized modifications of the system's configuration (GitHub Advisory).

The vulnerability requires access to the administrative interface of PrestaShop installations. No public exploits have been reported (GitHub Advisory).

The vulnerability has been patched in PrestaShop version 1.7.6.6. Users are advised to upgrade to this version or later to mitigate the security risk (GitHub Advisory).