Lucene search

Magento 2 Community Edition Weak Cryptography

🗓️ 24 May 2022 17:25:00Reported by GitHub Advisory DatabaseType

Weak Cryptography in Magento 2 Community Editio

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2019-8118	5 Nov 201923:15	–	osv
OSV	Magento 2 Community Edition Weak Cryptography	24 May 202217:00	–	osv
CVE	CVE-2019-8118	5 Nov 201923:15	–	cve
Friends Of PHP	PRODSECBUG-2452: User Password is stored in clear	8 Oct 201900:00	–	friendsofphp
Cvelist	CVE-2019-8118	5 Nov 201922:49	–	cvelist
Prion	Design/Logic Flaw	5 Nov 201923:15	–	prion
NVD	CVE-2019-8118	5 Nov 201923:15	–	nvd
OpenVAS	Magento 2.2.x < 2.2.10, 2.3.x < 2.3.3 or 2.3.2-p1 Multiple Vulnerabilities (Oct 2019)	7 Nov 201900:00	–	openvas

Vulners

Node

magento community-editionRange2.3.0–2.3.3

magento community-editionRange2.2.0–2.2.10

magento community-editionRange2.1.0–2.1.19

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-8118
web	www.web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8118.yaml
magento	www.magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
github	www.github.com/advisories/GHSA-hmch-9947-82rj

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 17:00Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.001

CWE-312