Magento Zend Framework Vulnerability Fixed With SUPEE-9652 Patch

The Zend Framework 1 and 2 email component which is used in Magnto 1 and Magento 2 versions has a new found vulnerability which can compromise your Magento eCommerce store security. The vulnerability can pave the way for remote code execution attacks if Sendmail is used as a mail transport agent.

Follow the suggested steps shown before to find if you have been a victim of such an attack:

• Enter system settings
• For Magento 1: System-> Configuration-> Advanced-> System-> Mail Sending Settings-> Set Return-Path
• For Magento 2: Stores-> Configuration-> Advanced-> System-> Mail Sending Settings-> Set Return-Path
• If the Set Return-Path is set to ‘Yes’ then you use Sendmail and your eCommerce store is open to being a victim of this particular attack.
• Note: If you are an Enterprise Cloud customer then Magento would have instantly fixed the issue for you.
• It’s highly advisable that you set the Set Return-Path value to ‘No’ until you install the patch released to keep your eCommerce store safe from attackers.

Magento Releases The Fix For All Versions:

The vulnerability with the release of the patch – SUPEE-9652 and also upgrade paths to various Magento editions.

Learn how to fix the threat if you are a:

1. Enterprise Edition Merchant
2. Community Edition Merchant
3. Magento Partners

It’s advisable to fix the security threat as soon as possible by applying the suggested patch to ensure your eCommerce website is secured and no intruder can gain access to your system.