Adobe Commerce Incorrect Authorization Vulnerability Allowing Security Feature Bypass

A vulnerability has been identified in Adobe Commerce that involves incorrect authorization, potentially allowing a high-privileged attacker to bypass security measures and gain unauthorized read access. This vulnerability affects several versions of Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. Notably, exploitation does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized read access by bypassing security features.

Remediation

Users are advised to update to the latest versions of Adobe Commerce, Adobe Commerce B2B, or Magento Open Source. Instructions for updating can be found in the Adobe Security Bulletin APSB26-73.