← Back

CVE-2019-7858

nvd nist
Published: Aug 2, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.

Affected (3)

Products: Magento: Magento
1 product
Magento
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Magento
From 2.1.0 to 2.1.18
From 2.2.0 to 2.2.9
From 2.3.0 to 2.3.2

Timeline

No history available yet.