Adobe Commerce Incorrect Authorization Vulnerability Allowing Security Feature Bypass

A vulnerability allowing security feature bypass through incorrect authorization has been identified in Adobe Commerce. This issue could enable an attacker to gain unauthorized read access by bypassing security measures. The vulnerability affects multiple versions of Adobe Commerce, Magento Open Source, and Adobe Commerce B2B, as well as Adobe Commerce Events. Exploitation of this vulnerability does not require user interaction, but depends on conditions beyond the attacker's control.

Impact

Exploitation of this vulnerability could lead to unauthorized read access by bypassing security measures.

Remediation

Users are advised to update to the latest versions of Adobe Commerce, Magento Open Source, or Adobe Commerce B2B. Instructions for updating can be found in the Adobe Security Bulletin APSB26-73. For Adobe Commerce Events, refer to the guide on upgrading modules and extensions.