Lucene search
+L

9 matches found

OSV
OSV
•added 2024/08/14 12:35 p.m.•17 views

GHSA-4XGG-RW35-7MV5 Magento Improper Authorization leads to Security feature bypass

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS6.6AI score0.00419EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/08/14 12:35 p.m.•14 views

Magento Improper Authorization leads to Security feature bypass

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS6.6AI score0.00419EPSS
SaveExploits0References3Affected Software2
Github Security Blog
Github Security Blog
•added 2024/08/14 12:35 p.m.•16 views

Magento Improper Authorization Leading to Security feature bypass

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS6.6AI score0.00442EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2024/08/14 12:35 p.m.•9 views

GHSA-4XMJ-F664-HV98 Magento Improper Authorization leads to Security feature bypass

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS6.6AI score0.00442EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/08/14 11:57 a.m.•36 views

CVE-2024-39412 Adobe Commerce | Improper Authorization (CWE-285)

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and perform a minor integrity...

4.3CVSS0.00429EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/14 12:00 a.m.•3 views

PT-2024-41521

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS5.8AI score0.00442EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/14 12:00 a.m.•2 views

CVE-2024-39413: Improper Authorization

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

4.3CVSS5.5AI score0.00442EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/13 12:00 a.m.•2 views

PT-2024-6002

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabili...

4.3CVSS5.8AI score0.00442EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/27 12:00 a.m.•5 views

CVE-2023-22251: Incorrect Authorization

Adobe Commerce versions 2.4.4-p2 and earlier and 2.4.5-p1 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure...

4.3CVSS5.8AI score0.00563EPSS
SaveExploits0References2
Rows per page
Query Builder