Description

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.

Remediation

References

CVE-2019-8118

Related Vulnerabilities

WordPress Plugin Simple Events Calendar SQL Injection (1.4.0)

WordPress Plugin Calculated Fields Form Cross-Site Scripting (1.0.81)

Squid Improper Certificate Validation Vulnerability (CVE-2023-46724)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6296)

OpenSSL Numeric Errors Vulnerability (CVE-2009-0789)

Severity

Medium

Classification

CVE-2019-8118 CWE-312 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities