CVE-2024-45149
LOWDescription
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | commerce_b2b |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
| adobe | magento |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-45149? +
How severe is CVE-2024-45149? +
What products are affected by CVE-2024-45149? +
How do I check if I'm vulnerable to CVE-2024-45149? +
Related Vulnerabilities
mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases. In versions prior to 0.6.0, the read_only mode …
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
Horilla is a free and open source Human Resource Management System (HRMS). In 1.5.0, an insecure direct object reference in …
mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, no administrator verification takes …
vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially access other algorithms …
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately …