Lucene search
GoogleOSV:GHSA-X5Q5-6WVF-2FPQHistoryMay 24, 2022 - 5:00 p.m.
Magento 2 Community Edition Insufficient Logging
2022-05-2417:00:25
Google
osv.dev
1
0.001 Low
EPSS
Percentile
27.3%
An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Failure to track admin actions related to design configuration could lead to repudiation attacks.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8124.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
nvd.nist.gov/vuln/detail/CVE-2019-8124
web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
Related
cve
cve
CVE-2019-8124
2019-11-05 23:15:12
osv
osv
CVE-2019-8124
2019-11-05 23:15:12
prion
prion
Design/Logic Flaw
2019-11-05 23:15:00
nvd
nvd
CVE-2019-8124
2019-11-05 23:15:12
friendsofphp
friendsofphp
cvelist
cvelist
CVE-2019-8124
2019-11-05 22:51:03
github
github
Magento 2 Community Edition Insufficient Logging
2022-05-24 17:00:25
openvas
openvas