CVE-2019-7886

State: PUBLISHED · Published: 2019-08-02 · Updated: 2024-08-04 · Assigner: adobe

Description

A cryptograhic flaw exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A weak cryptograhic mechanism is used to generate the intialization vector in multiple security relevant contexts.

CWE

(none)

Affected

n/a / Magento 2 — v=Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 [affected]

CVSS

(none)

References

https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2019/7xxx/CVE-2019-7886.json