Adobe Commerce Improper Authorization Vulnerability Leading to Security Feature Bypass

A vulnerability allowing improper authorization has been identified in Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier. This vulnerability could result in a security feature bypass, allowing an attacker to circumvent security measures and gain unauthorized access. The issue has a limited impact on confidentiality but a high impact on integrity. Notably, exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access, allowing attackers to bypass security measures and potentially manipulate data, given the high impact on integrity.