Description
Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe Systems | Magento 2 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | magento/community-edition | >= 2.1.0, < 2.1.19 | 2.1.19 | GHSA-hmch-9947-82rj |
| Packagist | magento/community-edition | >= 2.2.0, < 2.2.10 | 2.2.10 | GHSA-hmch-9947-82rj |
| Packagist | magento/community-edition | >= 2.3.0, < 2.3.3 | 2.3.3 | GHSA-hmch-9947-82rj |