Adobe Commerce Improper Access Control Vulnerability Allowing Security Feature Bypass

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier. This vulnerability could lead to a security feature bypass, allowing a low-privileged attacker to circumvent security measures and gain unauthorized access, thereby affecting confidentiality and integrity. The exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access, allowing attackers to bypass security features and potentially manipulate data, thereby compromising the confidentiality and integrity of the affected system.