Adobe Commerce Improper Access Control Vulnerability Allowing Security Feature Bypass

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier. This vulnerability could lead to a security feature bypass, allowing a low-privileged attacker to gain unauthorized read access by circumventing established security measures. The exploitation of this vulnerability does not require any user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized read access, allowing attackers to bypass security measures and access sensitive information.