Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-34104

Date: June 13, 2024

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction.

Language: PHP

Severity Score

Related Resources (8)

https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
https://github.com/magento/magento2
https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
https://helpx.adobe.com/security/products/magento/apsb24-40.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34104
https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
https://www.mend.io/vulnerability-database/CVE-2024-34104

Severity Score

Weakness Type (CWE)

Improper Authorization

CWE-285

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us