CVE-2019-8123
CVE-2019-8123
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Nov 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectively track configuration changes.
Affected products
Adobe Systems Incorporated · Magento 1& 2Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →