CVE-2019-18985: Critical severity pimcore e-commerce framework vulnerability
Published Nov 15, 2019
·Updated
Pimcore before 6.2.2 lacks brute force protection for the 2FA token.
Affected Software
2 affected componentsFixes available
composer/pimcore/pimcore<6.2.2
6.2.2
Pimcore pimcore<6.2.2
Remediation
Patch Available
Event History
Nov 15, 2019
CVE Published
via MITRE·04:21 AM
Data Sourced
via MITRE·04:21 AM
Description
May 24, 2022
Advisory Published
05:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-18985?
CVE-2019-18985 is considered a medium severity vulnerability due to the lack of brute force protection for the 2FA token.
2
How do I fix CVE-2019-18985?
To fix CVE-2019-18985, upgrade Pimcore to version 6.2.2 or later.
3
What does CVE-2019-18985 affect?
CVE-2019-18985 affects all Pimcore versions before 6.2.2.
4
What type of attack does CVE-2019-18985 allow?
CVE-2019-18985 allows attackers to perform brute force attacks on the 2FA token.
5
Is there a workaround for CVE-2019-18985?
There is no official workaround for CVE-2019-18985; updating to the latest version is recommended.