Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-34106

Date: June 13, 2024

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation of this issue does not require user interaction.

Language: PHP

Severity Score

Related Resources (8)

https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
https://github.com/magento/magento2
https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
https://helpx.adobe.com/security/products/magento/apsb24-40.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34106
https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
https://www.mend.io/vulnerability-database/CVE-2024-34106

Severity Score

Weakness Type (CWE)

Incorrect Authorization

CWE-863

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us