Magento up to 2.1.17/2.2.8/2.3.1 SOAP Web Service Endpoint SOAP Request Customer information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in Magento up to 2.1.17/2.2.8/2.3.1. Impacted is an unknown function of the component SOAP Web Service Endpoint. The manipulation as part of SOAP Request leads to information disclosure (Customer). This vulnerability is listed as CVE-2019-7951. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Magento up to 2.1.17/2.2.8/2.3.1. It has been rated as problematic. This issue affects some unknown functionality of the component SOAP Web Service Endpoint. The manipulation as part of a SOAP Request leads to a information disclosure vulnerability (Customer). Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:

An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP requests.

The weakness was presented 08/02/2019 (Website). It is possible to read the advisory at magento.com. The identification of this vulnerability is CVE-2019-7951 since 02/12/2019. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

Upgrading to version 2.1.18, 2.2.9 or 2.3.2 eliminates this vulnerability.

See VDB-133339, VDB-139403, VDB-139404 and VDB-139412 for similar entries. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• E-Commerce Management Software

Name

• Magento

Version

• 2.1.0
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4
• 2.1.5
• 2.1.6
• 2.1.7
• 2.1.8
• 2.1.9
• 2.1.10
• 2.1.11
• 2.1.12
• 2.1.13
• 2.1.14
• 2.1.15
• 2.1.16
• 2.1.17
• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.2.7
• 2.2.8
• 2.3.0
• 2.3.1

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion