CVE-2015-8707

CRITICAL

Magento < 1.9.2.1 and < 1.14.2.1 - Exposure of Sensitive Information via Password Reset Token

Title source: llm
STIX 2.1

Description

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://magento.com/security/patches/supee-6788

Scores

CVSS v3 9.8
EPSS 0.0020
EPSS Percentile 42.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-200
Status published
Products (2)
magento/magento < 1.14.2.1
magento/magento < 1.9.2.1
Published Sep 26, 2017
Tracked Since Feb 18, 2026