VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026

CVE-2024-45122

CVE-2024-45122

Description

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
magento/community-editionPackagist
>= 2.4.7-beta1, < 2.4.7-p32.4.7-p3
magento/community-editionPackagist
>= 2.4.6-p1, < 2.4.6-p82.4.6-p8
magento/community-editionPackagist
>= 2.4.5-p1, < 2.4.5-p102.4.5-p10
magento/community-editionPackagist
< 2.4.4-p112.4.4-p11

Affected products

118
  • ghsa-coords
    pkg:composer/magento/community-edition
    Range: >= 2.4.7-beta1, < 2.4.7-p3
  • Adobe Inc./Commercecpe-rescue82 versions
    0+ 81 more
    • (no CPE)range: 0
    • cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
  • Adobe Inc./Magento35 versions
    cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*+ 34 more
    • cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.3:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.