BIT-MAGENTO-2024-34104

🗓️ 17 Jun 2024 07:25:58Reported by GoogleType

osv🔗 osv.dev👁 27 Views

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Adobe Commerce/Magento Open Source Multiple Vulnerabilities (APSB24-40)	23 Jul 202500:00	–	nessus
BDU FSTEC	Vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce Webhooks—related to deficiencies in authentication procedures, allowing attackers to circumvent existing security restrictions.	19 Jun 202400:00	–	bdu_fstec
CNNVD	Adobe Commerce 授权问题漏洞	13 Jun 202400:00	–	cnnvd
CNVD	Adobe Commerce License Issue Vulnerability (CNVD-2024-28954)	14 Jun 202400:00	–	cnvd
CVE	CVE-2024-34104	13 Jun 202409:04	–	cve
Cvelist	CVE-2024-34104 Adobe Commerce \| Improper Authorization (CWE-285)	13 Jun 202409:04	–	cvelist
EUVD	EUVD-2024-2198	3 Oct 202520:07	–	euvd
Github Security Blog	Magento Open Source Improper Authorization vulnerability	13 Jun 202409:31	–	github
NCSC	Vulnerabilities fixed in Adobe Commerce	1 Jul 202407:10	–	ncsc
NVD	CVE-2024-34104	13 Jun 202409:15	–	nvd