CVE-2024-39418
Adobe Commerce | Improper Authorization (CWE-285)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Adobe Commerce | Improper Authorization (CWE-285)
| Assigner | adobe |
| Reserved | 2024-06-24 |
| Published | 2024-08-14 |
| Updated | 2024-09-17 |
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
https://helpx.adobe.com/security/products/magento/apsb24-61.html
