Vulnerabilities > CVE-2019-8113 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Magento
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmation code for customer registration.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 29 |