CVE-2019-7855

Summary

A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.

Affected Software

VendorProductVersion RangeStatus
n/aMagento 2Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2affected

Weaknesses

  • Cryptographic Flaw

ADP Enrichment

CVE Program Container

Additional References

References