CVE-2024-45115: Adobe Commerce | Improper Authentication (CWE-287)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45115?
The severity of CVE-2024-45115 has been classified as high due to its potential for privilege escalation.
How do I fix CVE-2024-45115?
To fix CVE-2024-45115, update Adobe Commerce to a version that is not affected, specifically versions later than 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and 2.4.4-p10.
What versions of Adobe Commerce are impacted by CVE-2024-45115?
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are impacted by CVE-2024-45115.
What type of vulnerability is CVE-2024-45115?
CVE-2024-45115 is an improper authentication vulnerability that can lead to privilege escalation.
What can an attacker do with CVE-2024-45115?
An attacker exploiting CVE-2024-45115 could gain unauthorized access or elevated privileges within the affected Adobe Commerce instance.