Magento Improper Authorization vulnerability
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-34256US | critical9.8OT erhöht | — | ||
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privileg… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/magento/magento2PACKAGE
- https://github.com/magento/magento2/commit/246d524b7586af2245092008e0d92b8d6fdd8523WEB
- https://github.com/magento/magento2/commit/5548bc64b5bc904346c0af9193a7fbb5274b4efaWEB
- https://github.com/magento/magento2/commit/5f07eba878296a37bd5c3a2baecad48948547594WEB
- https://helpx.adobe.com/security/products/magento/apsb22-38.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-34256ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan