Volerion logoVolerion
Volerion logoVolerion

Adobe Commerce Improper Access Control Vulnerability Allowing Security Feature Bypass

Vulnerability

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier. This vulnerability could lead to a security feature bypass, allowing an attacker to circumvent security measures and gain unauthorized access. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access by bypassing security measures.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
5.0
exploitability
7.6
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.