medium5.3
CVE-2019-8118
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for cu…
Impact
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magento | Magento | from 2.1.0 before 2.1.19 from 2.2.0 before 2.2.10 from 2.3.0 before 2.3.2 Version 2.3.2 |