Description

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.

Remediation

References

CVE-2019-8118

Related Vulnerabilities

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Request Forgery (1.5.2)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-32565)

WordPress Plugin Essential Grid Portfolio-Photo Gallery Security Bypass (1.1.2)

OpenSSL Inadequate Encryption Strength Vulnerability (CVE-2014-0224)

WebLogic CVE-2023-21837 Vulnerability (CVE-2023-21837)

Severity

Medium

Classification

CVE-2019-8118 CWE-312 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities