Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-34256

Date: August 16, 2022

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.

Severity Score

Related Resources (7)

https://github.com/magento/magento2/commit/5548bc64b5bc904346c0af9193a7fbb5274b4efa
https://github.com/magento/magento2/commit/5f07eba878296a37bd5c3a2baecad48948547594
https://github.com/magento/magento2
https://github.com/magento/magento2/commit/246d524b7586af2245092008e0d92b8d6fdd8523
https://helpx.adobe.com/security/products/magento/apsb22-38.html
https://nvd.nist.gov/vuln/detail/CVE-2022-34256
https://www.mend.io/vulnerability-database/CVE-2022-34256

Severity Score

Weakness Type (CWE)

Improper Authorization

CWE-285

Incorrect Authorization

CWE-863

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us