Adobe Commerce Insufficiently Protected Credentials Vulnerability Leading to Security Feature Bypass

A vulnerability allowing insufficiently protected credentials has been identified in Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier. This vulnerability could lead to a security feature bypass, allowing a high privileged attacker to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to protected resources by allowing attackers to obtain sensitive credential information, thereby bypassing security features.