GitHub Advisoryadvisory · Packagist

GHSA-hmch-9947-82rj Magento 2 Community Edition Weak Cryptography

MEDIUM Published 2022-05-24 Modified 2023-09-26 Official page ↗
Aliases
CVE-2019-8118
Ecosystem
Packagist
Packages
magento/community-edition
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-312
Reviewed
2023-07-18

Affected packages

• Packagist magento/community-edition: >= 2.1.0, < 2.1.19 → fixed in 2.1.19 • Packagist magento/community-edition: >= 2.2.0, < 2.2.10 → fixed in 2.2.10 • Packagist magento/community-edition: >= 2.3.0, < 2.3.3 → fixed in 2.3.3

Description

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.

Related

Alias · CVE (1)

  • CVE-2019-8118 Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed… vulnerability

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References