Adobe Commerce Vulnerable to Improper Authentication Attacks

CVE-2024-45148

Summary

An improper authentication vulnerability exists in Adobe Commerce affecting several versions, potentially allowing low-privileged attackers to bypass security mechanisms and gain unauthorized access to sensitive data and system functionalities. This vulnerability can be exploited without user interaction, making it easier for malevolent actors to leverage it for nefarious purposes. Organizations using the affected versions are urged to review their security measures and apply necessary patches to mitigate risks associated with this vulnerability.

References