VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026

CVE-2024-45115

CVE-2024-45115

Description

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.

Affected products

118
  • Adobe Inc./Commerce83 versions
    cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*+ 82 more
    • cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
    • (no CPE)range: 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier
    • (no CPE)range: 0
  • Adobe Inc./Magento35 versions
    cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*+ 34 more
    • cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.3:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.