Vulnerability Details CVE-2024-45132
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect confidentiality. Exploitation of this issue does not require user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.1%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-45132
-
cpe:2.3:a:adobe:commerce:-
-
cpe:2.3:a:adobe:commerce:2.3.7
-
cpe:2.3:a:adobe:commerce:2.4.0
-
cpe:2.3:a:adobe:commerce:2.4.1
-
cpe:2.3:a:adobe:commerce:2.4.2
-
cpe:2.3:a:adobe:commerce:2.4.3
-
cpe:2.3:a:adobe:commerce:2.4.4
-
cpe:2.3:a:adobe:commerce:2.4.5
-
cpe:2.3:a:adobe:commerce:2.4.6
-
cpe:2.3:a:adobe:commerce:2.4.7
-
cpe:2.3:a:adobe:commerce_b2b:1.3.3
-
cpe:2.3:a:adobe:commerce_b2b:1.3.4
-
cpe:2.3:a:adobe:commerce_b2b:1.3.5
-
cpe:2.3:a:adobe:commerce_b2b:1.4.2
-
cpe:2.3:a:adobe:magento:-
-
cpe:2.3:a:adobe:magento:2.4.3
-
cpe:2.3:a:adobe:magento:2.4.4
-
cpe:2.3:a:adobe:magento:2.4.5
-
cpe:2.3:a:adobe:magento:2.4.6
-
cpe:2.3:a:adobe:magento:2.4.7