Lucene search

[email protected]NVD:CVE-2019-8124

HistoryNov 05, 2019 - 11:15 p.m.

CVE-2019-8124

2019-11-0523:15:12

[email protected]

web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Failure to track admin actions related to design configuration could lead to repudiation attacks.

Affected configurations

NVD

Node

magentomagentoRange2.1.0–2.1.19commerce

magentomagentoRange2.1.0–2.1.19open_source

magentomagentoRange2.2.0–2.2.10commerce

magentomagentoRange2.2.0–2.2.10open_source

magentomagentoRange2.3.0–2.3.2commerce

magentomagentoRange2.3.0–2.3.2open_source

magentomagentoMatch2.3.2-commerce

magentomagentoMatch2.3.2-open_source

References

magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

Related for NVD:CVE-2019-8124

cve1 osv2 prion1 friendsofphp1 cvelist1 github1 openvas1