CVE-2024-45149

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

CVSS v3 2.7 LOW

2.7^/10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://helpx.adobe.com/security/products/magento/apsb24-73.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:commerce:2.4.4:-::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p1::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p10::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p2::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p3::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p4::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p5::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p6::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p7::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p8::::::
	cpe:2.3:a:adobe:commerce:2.4.4:p9::::::
	cpe:2.3:a:adobe:commerce:2.4.5:-::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p1::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p2::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p3::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p4::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p5::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p6::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p7::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p8::::::
	cpe:2.3:a:adobe:commerce:2.4.5:p9::::::
	cpe:2.3:a:adobe:commerce:2.4.6:-::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p1::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p2::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p3::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p4::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p5::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p6::::::
	cpe:2.3:a:adobe:commerce:2.4.6:p7::::::
	cpe:2.3:a:adobe:commerce:2.4.7:-::::::
	cpe:2.3:a:adobe:commerce:2.4.7:b1::::::
	cpe:2.3:a:adobe:commerce:2.4.7:b2::::::
	cpe:2.3:a:adobe:commerce:2.4.7:p1::::::
	cpe:2.3:a:adobe:commerce:2.4.7:p2::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.3:-::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.4:-::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.5:-::::::
	cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7::::::
	cpe:2.3:a:adobe:commerce_b2b:1.4.2:-::::::
	cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1::::::
	cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2::::::
	cpe:2.3:a:adobe:magento:2.4.4:-:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p1:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p10:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p2:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p3:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p4:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p5:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p6:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p7:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p8:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.4:p9:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:-:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p1:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p2:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p3:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p4:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p5:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p6:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p7:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p8:::open_source:::*
	cpe:2.3:a:adobe:magento:2.4.5:p9:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:-:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p1:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p2:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p3:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p4:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p5:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p6:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.6:p7:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.7:-:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.7:b1:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.7:p1:::open_source:::*
cpe:2.3:a:adobe:magento:2.4.7:p2:::open_source:::*

History

12 Dec 2024, 21:07

Type	Values Removed	Values Added
CPE	cpe:2.3:a:adobe:commerce:2.4.3:-:::::: cpe:2.3:a:adobe:commerce:2.4.0:::::::* cpe:2.3:a:adobe:commerce:-:::::::* cpe:2.3:a:adobe:commerce:2.4.2:ext-3:::::: cpe:2.3:a:adobe:commerce:2.4.3:p1:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-3:::::: cpe:2.3:a:adobe:commerce:2.4.2:ext-1:::::: cpe:2.3:a:adobe:commerce:2.4.3:ext-4:::::: cpe:2.3:a:adobe:commerce:2.3.7:p2:::::: cpe:2.3:a:adobe:commerce:2.4.3:ext-3:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4:::::: cpe:2.3:a:adobe:commerce:2.4.0:-:::::: cpe:2.3:a:adobe:commerce:2.3.7:p3:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-4:::::: cpe:2.3:a:adobe:commerce:2.4.2:p1:::::: cpe:2.3:a:adobe:commerce:2.4.1:ext-3:::::: cpe:2.3:a:adobe:commerce:2.4.3:ext-2:::::: cpe:2.3:a:adobe:commerce:2.4.2:::::::* cpe:2.3:a:adobe:commerce:2.4.3:::::::* cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:::::: cpe:2.3:a:adobe:commerce:2.4.1:-:::::: cpe:2.3:a:adobe:commerce:2.4.1:::::::* cpe:2.3:a:adobe:commerce:2.4.0:ext-2:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:::::: cpe:2.3:a:adobe:magento:2.4.3::::open_source::: cpe:2.3:a:adobe:commerce:2.4.3:p2:::::: cpe:2.3:a:adobe:commerce:2.3.7:p1:::::: cpe:2.3:a:adobe:commerce:2.4.2:-:::::: cpe:2.3:a:adobe:commerce:2.4.2:p2:::::: cpe:2.3:a:adobe:commerce:2.4.2:ext-2:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-1:::::: cpe:2.3:a:adobe:magento:-::::open_source::: cpe:2.3:a:adobe:commerce:2.4.1:ext-4:::::: cpe:2.3:a:adobe:commerce:2.4.3:ext-1:::::: cpe:2.3:a:adobe:commerce:2.4.1:ext-2:::::: cpe:2.3:a:adobe:commerce:2.3.7:-:::::: cpe:2.3:a:adobe:commerce:2.4.2:ext-4:::::: cpe:2.3:a:adobe:commerce:2.4.1:ext-1::::::

12 Dec 2024, 18:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~4.3~~	v2 : unknown v3 : 2.7
Summary	(en) Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.	(en) Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

11 Oct 2024, 22:12

Type	Values Removed	Values Added
Summary		(es) Las versiones 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 y anteriores de Adobe Commerce se ven afectadas por una vulnerabilidad de control de acceso inadecuado que podría provocar la omisión de una función de seguridad. Un atacante con pocos privilegios podría aprovechar esta vulnerabilidad para omitir las medidas de seguridad y tener un impacto bajo en la confidencialidad. La explotación de este problema no requiere la interacción del usuario.
CWE		NVD-CWE-noinfo
References	~~() https://helpx.adobe.com/security/products/magento/apsb24-73.html -~~	() https://helpx.adobe.com/security/products/magento/apsb24-73.html - Vendor Advisory
First Time		Adobe commerce B2b Adobe Adobe magento Adobe commerce
CPE		cpe:2.3:a:adobe:commerce:2.4.3:-:::::: cpe:2.3:a:adobe:commerce:2.4.5:p6:::::: cpe:2.3:a:adobe:commerce:-:::::::* cpe:2.3:a:adobe:commerce:2.4.2:ext-3:::::: cpe:2.3:a:adobe:magento:2.4.6:p2:::open_source:::* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:::::: cpe:2.3:a:adobe:commerce:2.4.4:p8:::::: cpe:2.3:a:adobe:commerce:2.4.4:p7:::::: cpe:2.3:a:adobe:commerce:2.4.4:p9:::::: cpe:2.3:a:adobe:magento:2.4.4:-:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p2:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.7:-:::::: cpe:2.3:a:adobe:commerce:2.4.5:p8:::::: cpe:2.3:a:adobe:commerce:2.4.7:p1:::::: cpe:2.3:a:adobe:commerce:2.4.5:p3:::::: cpe:2.3:a:adobe:magento:2.4.5:p9:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.3:ext-4:::::: cpe:2.3:a:adobe:commerce:2.3.7:p2:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4:::::: cpe:2.3:a:adobe:magento:2.4.7:p1:::open_source:::* cpe:2.3:a:adobe:commerce:2.3.7:p3:::::: cpe:2.3:a:adobe:magento:2.4.7:p2:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.0:ext-4:::::: cpe:2.3:a:adobe:magento:2.4.5:p1:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.2:p1:::::: cpe:2.3:a:adobe:commerce:2.4.5:-:::::: cpe:2.3:a:adobe:commerce:2.4.6:p3:::::: cpe:2.3:a:adobe:commerce:2.4.2:::::::* cpe:2.3:a:adobe:commerce:2.4.4:p5:::::: cpe:2.3:a:adobe:magento:2.4.4:p1:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.5:p4:::::: cpe:2.3:a:adobe:commerce:2.4.3:::::::* cpe:2.3:a:adobe:commerce:2.4.1:-:::::: cpe:2.3:a:adobe:commerce:2.4.5:p1:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-2:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:::::: cpe:2.3:a:adobe:commerce:2.4.6:p4:::::: cpe:2.3:a:adobe:commerce:2.4.3:p2:::::: cpe:2.3:a:adobe:commerce:2.3.7:p1:::::: cpe:2.3:a:adobe:commerce:2.4.2:-:::::: cpe:2.3:a:adobe:magento:2.4.5:p4:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p6:::open_source:::* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:::::: cpe:2.3:a:adobe:magento:2.4.5:p7:::open_source:::* cpe:2.3:a:adobe:magento:-::::open_source::: cpe:2.3:a:adobe:commerce:2.4.1:ext-4:::::: cpe:2.3:a:adobe:magento:2.4.6:p5:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.7:b2:::::: cpe:2.3:a:adobe:commerce:2.4.7:b1:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:::::: cpe:2.3:a:adobe:magento:2.4.4:p3:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.3:ext-1:::::: cpe:2.3:a:adobe:commerce:2.4.5:p7:::::: cpe:2.3:a:adobe:commerce:2.4.6:p7:::::: cpe:2.3:a:adobe:magento:2.4.4:p8:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.7:p2:::::: cpe:2.3:a:adobe:commerce:2.4.4:p2:::::: cpe:2.3:a:adobe:commerce:2.4.6:p1:::::: cpe:2.3:a:adobe:commerce:2.4.4:p3:::::: cpe:2.3:a:adobe:magento:2.4.6:p1:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.1:ext-1:::::: cpe:2.3:a:adobe:commerce:2.4.4:-:::::: cpe:2.3:a:adobe:commerce:2.4.0:::::::* cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:::::: cpe:2.3:a:adobe:commerce:2.4.4:p4:::::: cpe:2.3:a:adobe:commerce:2.4.3:p1:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-3:::::: cpe:2.3:a:adobe:magento:2.4.4:p5:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.2:ext-1:::::: cpe:2.3:a:adobe:magento:2.4.4:p2:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.6:p2:::::: cpe:2.3:a:adobe:commerce:2.4.4:p1:::::: cpe:2.3:a:adobe:magento:2.4.4:p6:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.3:ext-3:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:::::: cpe:2.3:a:adobe:magento:2.4.4:p7:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.0:-:::::: cpe:2.3:a:adobe:magento:2.4.6:p3:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p3:::open_source:::* cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:::::: cpe:2.3:a:adobe:commerce:2.4.4:p10:::::: cpe:2.3:a:adobe:commerce:2.4.6:p6:::::: cpe:2.3:a:adobe:magento:2.4.5:p8:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p6:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p9:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.1:ext-3:::::: cpe:2.3:a:adobe:commerce:2.4.3:ext-2:::::: cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:::::: cpe:2.3:a:adobe:commerce:2.4.6:-:::::: cpe:2.3:a:adobe:commerce:2.4.1:::::::* cpe:2.3:a:adobe:magento:2.4.6:p7:::open_source:::* cpe:2.3:a:adobe:magento:2.4.3::::open_source::: cpe:2.3:a:adobe:commerce:2.4.2:p2:::::: cpe:2.3:a:adobe:commerce:2.4.2:ext-2:::::: cpe:2.3:a:adobe:commerce:2.4.5:p5:::::: cpe:2.3:a:adobe:magento:2.4.4:p10:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p4:::open_source:::* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:::::: cpe:2.3:a:adobe:commerce:2.4.4:p6:::::: cpe:2.3:a:adobe:commerce:2.4.0:ext-1:::::: cpe:2.3:a:adobe:magento:2.4.7:b1:::open_source:::* cpe:2.3:a:adobe:magento:2.4.7:-:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.5:p9:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:::::: cpe:2.3:a:adobe:magento:2.4.4:p4:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:-:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.1:ext-2:::::: cpe:2.3:a:adobe:magento:2.4.5:-:::open_source:::* cpe:2.3:a:adobe:commerce:2.4.6:p5:::::: cpe:2.3:a:adobe:magento:2.4.5:p5:::open_source:::* cpe:2.3:a:adobe:commerce:2.3.7:-:::::: cpe:2.3:a:adobe:commerce:2.4.5:p2:::::: cpe:2.3:a:adobe:commerce:2.4.2:ext-4::::::
CVSS	v2 : ~~unknown~~ v3 : ~~2.7~~	v2 : unknown v3 : 4.3

10 Oct 2024, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-10-10 10:15

Updated : 2024-12-12 21:07

NVD link : CVE-2024-45149

Mitre link : CVE-2024-45149

CVE.ORG link : CVE-2024-45149

JSON object : View

Products Affected

adobe

magento
commerce_b2b
commerce

CWE

CWE-284

Improper Access Control

NVD-CWE-noinfo

2.7 /10