CVE-2024-45133
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/10/2024
Last modified:
11/10/2024
Description
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
Impact
Base Score 3.x
2.70
Severity 3.x
LOW
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:* | ||
cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page