Description
Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized view access of data. Exploitation of this issue does not require user interaction.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- Adobe / Adobe Commerce0 – 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
- Adobe / Adobe Commerce2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 – 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17
- Adobe / Adobe Commerce0 – 2.4.4-p16
- Adobe / Adobe Commerce B2B0 – 1.5.3-alpha3, 1.5.2-p3, 1.4.2-p8, 1.3.5-p13, 1.3.4-p15, 1.3.3-p16
- Adobe / Adobe Commerce B2B1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.5-p14, 1.3.4-p16, 1.3.3-p17 – 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.5-p14, 1.3.4-p16, 1.3.3-p17
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.5 – 2.4.5
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.6 – 2.4.6
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.7 – 2.4.7
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.8 – 2.4.8
- Adobe / commerce2.4.9 – 2.4.9
- Adobe / commerce2.4.9 – 2.4.9
- Adobe / commerce2.4.9 – 2.4.9
- Adobe / commerce2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce2.4.4 – 2.4.4
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.3 – 1.3.3
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.4 – 1.3.4
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.3.5 – 1.3.5
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.4.2 – 1.4.2
- Adobe / commerce_b2b1.5.2 – 1.5.2
- Adobe / commerce_b2b1.5.2 – 1.5.2
- Adobe / commerce_b2b1.5.2 – 1.5.2
- Adobe / commerce_b2b1.5.2 – 1.5.2
- Adobe / commerce_b2b1.5.3 – 1.5.3
- Adobe / commerce_b2b1.5.3 – 1.5.3
- Adobe / commerce_b2b1.5.3 – 1.5.3
- Adobe / Magento2.4.9 – 2.4.9
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.5 – 2.4.5
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.6 – 2.4.6
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.7 – 2.4.7
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento2.4.8 – 2.4.8
- Adobe / Magento Open Source0 – 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
- Adobe / Magento Open Source2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16 – 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16
References
Updated 5m ago · 8 sources