漏洞标题
Adobe Commerce 不良访问控制 特权升级
漏洞描述信息
Adobe Commerce不当访问控制权限提升
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Adobe Commerce Improper Access Control Privilege escalation
漏洞描述信息
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage this vulnerability to perform an account takeover for a victim. Exploitation of this issue does not require user interaction.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
访问控制不恰当
漏洞标题
Adobe Magento Open Source 访问控制错误漏洞
漏洞描述信息
Magento Open Source是提供基本的电子商务功能，允许您从头开始构建独特的在线商店。 Adobe Magento Open Source存在访问控制错误漏洞，目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
CVSS信息
N/A
漏洞类别
授权问题