Em resumo
- CVE-2019-7858 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta magento/community-edition, magento (magento).
- Chance de exploração nos próximos 30 dias (EPSS): 0.74%, maior que 54.6% das vulnerabilidades.
- Correção: atualize para 2.1.18, 2.2.9, 2.3.2 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| magento/community-edition Packagist | ≥ 2.1.0, < 2.1.18≥ 2.2.0, < 2.2.9≥ 2.3.0, < 2.3.2
| 2.1.182.2.92.3.2
|
| magento | ≥ 2.1.0, < 2.1.18≥ 2.2.0, < 2.2.9≥ 2.3.0, < 2.3.2
| 2.1.182.2.92.3.2
|
Description
A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.
NVD description
A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.
Mais vulnerabilidades de magento/community-edition
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free