CVE-2017-13761 Fastly Magento2 sensitive information disclosure
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fastly/magento2(Packagist) | < 1.2.26 | 1.2.26 |
| fastly/magento2(Packagist) | = 1.0.0 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.1 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.2 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.3 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.4 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.5 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.7 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.8 | No fix listed |
| fastly/magento2(Packagist) | = 1.0.9 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.1 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.10 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.11 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.2 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.3 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.4 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.5 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.6 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.7 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.8 | No fix listed |
| fastly/magento2(Packagist) | = 1.1.9 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.0 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.1 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.10 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.11 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| fastly/magento2(Packagist) | = 1.2.12 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.13 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.14 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.15 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.16 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.17 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.18 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.19 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.2 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.20 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.21 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.22 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.23 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.24 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.25 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.3 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.4 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.5 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.6 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.7 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.8 | No fix listed |
| fastly/magento2(Packagist) | = 1.2.9 | No fix listed |
| fastly | <= 1.2.25 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- www.fastly.com vendor-advisory
- github.com