Adobe Commerce Incorrect Authorization Vulnerability Allowing Security Feature Bypass

A vulnerability allowing incorrect authorization has been identified in Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier. This vulnerability could lead to a security feature bypass, allowing a low privileged attacker to perform actions beyond their granted permissions. Such exploitation could result in a high impact on confidentiality and a low impact on integrity. Notably, this vulnerability can be exploited without user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed with elevated permissions, bypassing security features and potentially compromising sensitive information.