Lucene search
GoogleOSV:GHSA-7H8V-F2G9-39FXHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition Cryptographic Flaw
2022-05-2416:52:23
Google
osv.dev
6
0.001 Low
EPSS
Percentile
50.0%
A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7858.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7858
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
nvd
nvd
CVE-2019-7858
2019-08-02 22:15:15
cvelist
cvelist
CVE-2019-7858
2019-08-02 21:12:47
cve
cve
CVE-2019-7858
2019-08-02 22:15:15
friendsofphp
friendsofphp
PRODSECBUG-2172: Insecure user credential storage
2019-06-25 00:00:00
osv
osv
CVE-2019-7858
2019-08-02 22:15:15
github
github
Magento 2 Community Edition Cryptographic Flaw
2022-05-24 16:52:23
openvas
openvas