Adobe Commerce Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier. This vulnerability could lead to privilege escalation, as a low privileged attacker might exploit it to bypass security measures and gain unauthorized elevated access. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could allow a low privileged attacker to bypass security measures and gain unauthorized elevated access, leading to potential privilege escalation.