Lucene search
GoogleOSV:GHSA-H522-94XP-2XR6HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition Information Disclosure
2022-05-2416:52:27
Google
osv.dev
6
0.001 Low
EPSS
Percentile
26.9%
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges may be able to view metadata of a trusted device used by another administrator via a crafted http request.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7929.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
nvd.nist.gov/vuln/detail/CVE-2019-7929
web.archive.org/web/20220121011306/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
Related
cve
cve
CVE-2019-7929
2019-08-02 22:15:18
veracode
veracode
Information Disclosure
2019-08-08 02:05:37
prion
prion
Information disclosure
2019-08-02 22:15:00
cvelist
cvelist
CVE-2019-7929
2019-08-02 21:30:27
friendsofphp
friendsofphp
nvd
nvd
CVE-2019-7929
2019-08-02 22:15:18
osv
osv
CVE-2019-7929
2019-08-02 22:15:18
github
github
Magento 2 Community Edition Information Disclosure
2022-05-24 16:52:27
openvas
openvas