← CVE Intelligence

CVE-2019-7854

n/a / Magento 2 PUBLISHED

Description (CNA)

An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.

Affected (CNA)

Vendor / productVersions
n/a / Magento 2affected Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.