Adobe Commerce Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier. This vulnerability could lead to privilege escalation, as a low privileged attacker might exploit it to bypass security measures and gain unauthorized read access. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could allow a low privileged attacker to bypass access controls and gain unauthorized read access, potentially leading to privilege escalation.