Improper Authentication in Adobe Commerce B2B - CVE-2024-45115
Published: October 9, 2024
Vulnerability identifier: #VU98327
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-45115
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error within the authentication process. A remote attacker can bypass authentication and gain unauthorized access to the application.
Successful exploitation of the vulnerability mat result in the complete application compromise.
Affected software
Adobe Commerce B2B
How to mitigate CVE-2024-45115
Install updates from vendor's website.
Adobe Commerce B2B - addressed in versions 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3