Adobe Commerce Improper Access Control Vulnerability Allowing Security Feature Bypass

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier. This vulnerability could lead to a security feature bypass, allowing an attacker to circumvent security measures and gain limited write access. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized write access, allowing attackers to modify data or settings within the application.