Magento Forum

Credit Card information revealed on Invoice. 
 
shiloh
Jr. Member
 
Total Posts:  10
Joined:  2009-03-05
 

We had a serious security issue when submitting an order through the back end.

After the order was created, and the invoice sent, we received a call from the client letting us know their credit card information along with the CCV was available in clear. 

This does not happen when an order is submitted by the customer on the front end but only if the order is created by an admin on the back end.

We are currently on 1.2.1.2.

Thank you for your help.

 
Magento Community Magento Community
Magento Community
Magento Community
 
gfxguru
Sr. Member
 
Total Posts:  186
Joined:  2008-11-20
 

This can’t be true. Are you sure? Are you talking about a default transactional email?

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top