Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-35689

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.

Published

2022-10-14T20:15:10.223

Last Modified

2024-11-21T07:11:28.990

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe commerce < 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.5 Yes
Application adobe magento_open_source < 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.5 Yes
References