Vulnerability Details : CVE-2019-7929
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges may be able to view metadata of a trusted device used by another administrator via a crafted http request.
Products affected by CVE-2019-7929
- cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*
- cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*
- cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-7929
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-7929
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
|
4.9
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
1.2
|
3.6
|
NIST |
References for CVE-2019-7929
-
https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
Magento 2.3.2, 2.2.9 and 2.1.18 Security Update 3/3 | MagentoVendor Advisory
Jump to