Vulnerabilities fixed in Adobe Commerce and Magento

🗓️ 09 Oct 2024 13:38:09Reported by NCSCType

Adobe fixed vulnerabilities in Commerce and Magento that allowed circumvention, data access, privilege escalation, and remote code execution.

Reporter	Title	Published	Views	Family All 286
Tenable Nessus	Adobe Commerce/Magento Open Source Multiple Vulnerabilities (APSB24-73)	23 Jul 202500:00	–	nessus
Tenable Nessus	Adobe Commerce B2B Multiple Vulnerabilities (APSB24-73)	23 Jul 202500:00	–	nessus
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce lies in the fact that it allows information disclosure, enabling attackers to bypass security functions and gain unauthorized access to protected information.	17 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce stems from lack of access control mechanisms. This allows attackers to bypass security measures and gain unauthorized access to protected information.	17 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce stems from lack of access control mechanisms. This allows attackers to bypass security measures and gain unauthorized access to protected information.	17 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce lies in the lack of authentication procedures, which allow attackers to increase their privileges.	17 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce stems from lack of access control mechanisms. This allows attackers to bypass security measures and gain unauthorized access to protected information.	17 Oct 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B: This vulnerability stems from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.	18 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their authentication procedures’ deficiencies, which allow attackers to exploit these vulnerabilities to increase their privileges.	18 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their authentication procedures’ deficiencies, which allow attackers to circumvent security restrictions.	18 Oct 202400:00	–	bdu_fstec

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb24-73.html

09 Oct 2024 13:38Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.8 - 9.8

EPSS0.0108

SSVC