CVE-2019-7929 — Sensitive Information Exposure in Magento

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 80.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
MagentoMagento Community-editionAdobe Systems Incorporated Magento 2
Timeline
PublishedAug 2
Latest updateMay 24

Description

An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges may be able to view metadata of a trusted device used by another administrator via a crafted http request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages3 packages

▶NVDmagento/magento2.1.0 — 2.1.18+2
▶Packagistmagento/community-edition2.1.0 — 2.1.18+2
▶CVEListV5adobe_systems_incorporated/magento_2Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

🔴Vulnerability Details

3
OSV
Magento 2 Community Edition Information Disclosure↗2022-05-24
▶
GHSA
Magento 2 Community Edition Information Disclosure↗2022-05-24
▶
CVEList
CVE-2019-7929: An information leakage vulnerability exists in Magento 2↗2019-08-02
▶
CVE-2019-7929 — Sensitive Information Exposure | cvebase