What is the severity of CVE-2024-45120?

CVE-2024-45120 is a security feature bypass vulnerability with a high severity rating.

How do I fix CVE-2024-45120?

To fix CVE-2024-45120, update Adobe Commerce to versions 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.

Which versions of Adobe Commerce are affected by CVE-2024-45120?

Affected versions include Adobe Commerce 2.4.4-p10 and earlier, 2.4.5-p9 and earlier, 2.4.6-p7 and earlier, and 2.4.7-p2 and earlier.

What type of vulnerability is CVE-2024-45120?

CVE-2024-45120 is classified as a Time-of-check Time-of-use (TOCTOU) race condition vulnerability.

Can CVE-2024-45120 be exploited remotely?

Yes, an attacker can exploit CVE-2024-45120 remotely to bypass security features.

Vulnerability/
CVE-2024-45120

medium

4.3

CWE

367 362

10/10/2024

12/12/2024

CVE-2024-45120: Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

First published: Thu Oct 10 2024(Updated: )

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use of a resource, having a low impact on integrity. Exploitation of this issue requires user interaction.

Credit: psirt@adobe.com psirt@adobe.com

Affected Software	Affected Version	How to fix
composer/magento/community-edition	=2.4.4
composer/magento/community-edition	=2.4.5
composer/magento/community-edition	=2.4.6
composer/magento/community-edition	=2.4.7
composer/magento/community-edition	<2.4.4-p11	2.4.4-p11
composer/magento/community-edition	>=2.4.5-p1<2.4.5-p10	2.4.5-p10
composer/magento/community-edition	>=2.4.6-p1<2.4.6-p8	2.4.6-p8
composer/magento/community-edition	>=2.4.7-beta1<2.4.7-p3	2.4.7-p3
Adobe Magento Commerce	=2.4.4
Adobe Magento Commerce	=2.4.4-p1
Adobe Magento Commerce	=2.4.4-p10
Adobe Magento Commerce	=2.4.4-p2
Adobe Magento Commerce	=2.4.4-p3
Adobe Magento Commerce	=2.4.4-p4
Adobe Magento Commerce	=2.4.4-p5
Adobe Magento Commerce	=2.4.4-p6
Adobe Magento Commerce	=2.4.4-p7
Adobe Magento Commerce	=2.4.4-p8
Adobe Magento Commerce	=2.4.4-p9
Adobe Magento Commerce	=2.4.5
Adobe Magento Commerce	=2.4.5-p1
Adobe Magento Commerce	=2.4.5-p2
Adobe Magento Commerce	=2.4.5-p3
Adobe Magento Commerce	=2.4.5-p4
Adobe Magento Commerce	=2.4.5-p5
Adobe Magento Commerce	=2.4.5-p6
Adobe Magento Commerce	=2.4.5-p7
Adobe Magento Commerce	=2.4.5-p8
Adobe Magento Commerce	=2.4.5-p9
Adobe Magento Commerce	=2.4.6
Adobe Magento Commerce	=2.4.6-p1
Adobe Magento Commerce	=2.4.6-p2
Adobe Magento Commerce	=2.4.6-p3
Adobe Magento Commerce	=2.4.6-p4
Adobe Magento Commerce	=2.4.6-p5
Adobe Magento Commerce	=2.4.6-p6
Adobe Magento Commerce	=2.4.6-p7
Adobe Magento Commerce	=2.4.7
Adobe Magento Commerce	=2.4.7-b1
Adobe Magento Commerce	=2.4.7-b2
Adobe Magento Commerce	=2.4.7-p1
Adobe Magento Commerce	=2.4.7-p2
Adobe Commerce	=1.3.3
Adobe Commerce	=1.3.3-p10
Adobe Commerce	=1.3.4
Adobe Commerce	=1.3.4-p9
Adobe Commerce	=1.3.5
Adobe Commerce	=1.3.5-p7
Adobe Commerce	=1.4.2
Adobe Commerce	=1.4.2-p1
Adobe Commerce	=1.4.2-p2
Adobe Magento Open Source	=2.4.4
Adobe Magento Open Source	=2.4.4-p1
Adobe Magento Open Source	=2.4.4-p10
Adobe Magento Open Source	=2.4.4-p2
Adobe Magento Open Source	=2.4.4-p3
Adobe Magento Open Source	=2.4.4-p4
Adobe Magento Open Source	=2.4.4-p5
Adobe Magento Open Source	=2.4.4-p6
Adobe Magento Open Source	=2.4.4-p7
Adobe Magento Open Source	=2.4.4-p8
Adobe Magento Open Source	=2.4.4-p9
Adobe Magento Open Source	=2.4.5
Adobe Magento Open Source	=2.4.5-p1
Adobe Magento Open Source	=2.4.5-p2
Adobe Magento Open Source	=2.4.5-p3
Adobe Magento Open Source	=2.4.5-p4
Adobe Magento Open Source	=2.4.5-p5
Adobe Magento Open Source	=2.4.5-p6
Adobe Magento Open Source	=2.4.5-p7
Adobe Magento Open Source	=2.4.5-p8
Adobe Magento Open Source	=2.4.5-p9
Adobe Magento Open Source	=2.4.6
Adobe Magento Open Source	=2.4.6-p1
Adobe Magento Open Source	=2.4.6-p2
Adobe Magento Open Source	=2.4.6-p3
Adobe Magento Open Source	=2.4.6-p4
Adobe Magento Open Source	=2.4.6-p5
Adobe Magento Open Source	=2.4.6-p6
Adobe Magento Open Source	=2.4.6-p7
Adobe Magento Open Source	=2.4.7
Adobe Magento Open Source	=2.4.7-b1
Adobe Magento Open Source	=2.4.7-p1
Adobe Magento Open Source	=2.4.7-p2
Adobe Magento Commerce
Adobe Magento Commerce	=2.3.7
Adobe Magento Commerce	=2.3.7-p1
Adobe Magento Commerce	=2.3.7-p2
Adobe Magento Commerce	=2.3.7-p3
Adobe Magento Commerce	=2.3.7-p4
Adobe Magento Commerce	=2.3.7-p4-ext1
Adobe Magento Commerce	=2.3.7-p4-ext2
Adobe Magento Commerce	=2.3.7-p4-ext3
Adobe Magento Commerce	=2.3.7-p4-ext4
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0-ext-1
Adobe Magento Commerce	=2.4.0-ext-2
Adobe Magento Commerce	=2.4.0-ext-3
Adobe Magento Commerce	=2.4.0-ext-4
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1-ext-1
Adobe Magento Commerce	=2.4.1-ext-2
Adobe Magento Commerce	=2.4.1-ext-3
Adobe Magento Commerce	=2.4.1-ext-4
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2-ext-1
Adobe Magento Commerce	=2.4.2-ext-2
Adobe Magento Commerce	=2.4.2-ext-3
Adobe Magento Commerce	=2.4.2-ext-4
Adobe Magento Commerce	=2.4.2-p1
Adobe Magento Commerce	=2.4.2-p2
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3-ext-1
Adobe Magento Commerce	=2.4.3-ext-2
Adobe Magento Commerce	=2.4.3-ext-3
Adobe Magento Commerce	=2.4.3-ext-4
Adobe Magento Commerce	=2.4.3-p1
Adobe Magento Commerce	=2.4.3-p2
Adobe Magento Open Source
Adobe Magento Open Source	=2.4.3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-45120?
CVE-2024-45120 is a security feature bypass vulnerability with a high severity rating.
How do I fix CVE-2024-45120?
To fix CVE-2024-45120, update Adobe Commerce to versions 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.
Which versions of Adobe Commerce are affected by CVE-2024-45120?
Affected versions include Adobe Commerce 2.4.4-p10 and earlier, 2.4.5-p9 and earlier, 2.4.6-p7 and earlier, and 2.4.7-p2 and earlier.
What type of vulnerability is CVE-2024-45120?
CVE-2024-45120 is classified as a Time-of-check Time-of-use (TOCTOU) race condition vulnerability.
Can CVE-2024-45120 be exploited remotely?
Yes, an attacker can exploit CVE-2024-45120 remotely to bypass security features.

agent/weakness
agent/title
agent/description
agent/first-publish-date
agent/type
collector/github-advisory-latest
source/GitHub
alias/GHSA-47jp-46c9-25vf
alias/CVE-2024-45120
agent/software-canonical-lookup
agent/references
agent/event
agent/author
collector/github-advisory
collector/mitre-cve
source/MITRE
agent/severity
agent/last-modified-date
agent/trending
agent/source
agent/tags
agent/softwarecombine
collector/nvd-api
source/NVD
agent/software-canonical-lookup-request
collector/nvd-cve
package-manager/composer
vendor/adobe
canonical/adobe magento commerce
version/adobe magento commerce/2.4.4
version/adobe magento commerce/2.4.4-p1
version/adobe magento commerce/2.4.4-p10
version/adobe magento commerce/2.4.4-p2
version/adobe magento commerce/2.4.4-p3
version/adobe magento commerce/2.4.4-p4
version/adobe magento commerce/2.4.4-p5
version/adobe magento commerce/2.4.4-p6
version/adobe magento commerce/2.4.4-p7
version/adobe magento commerce/2.4.4-p8
version/adobe magento commerce/2.4.4-p9
version/adobe magento commerce/2.4.5
version/adobe magento commerce/2.4.5-p1
version/adobe magento commerce/2.4.5-p2
version/adobe magento commerce/2.4.5-p3
version/adobe magento commerce/2.4.5-p4
version/adobe magento commerce/2.4.5-p5
version/adobe magento commerce/2.4.5-p6
version/adobe magento commerce/2.4.5-p7
version/adobe magento commerce/2.4.5-p8
version/adobe magento commerce/2.4.5-p9
version/adobe magento commerce/2.4.6
version/adobe magento commerce/2.4.6-p1
version/adobe magento commerce/2.4.6-p2
version/adobe magento commerce/2.4.6-p3
version/adobe magento commerce/2.4.6-p4
version/adobe magento commerce/2.4.6-p5
version/adobe magento commerce/2.4.6-p6
version/adobe magento commerce/2.4.6-p7
version/adobe magento commerce/2.4.7
version/adobe magento commerce/2.4.7-b1
version/adobe magento commerce/2.4.7-b2
version/adobe magento commerce/2.4.7-p1
version/adobe magento commerce/2.4.7-p2
canonical/adobe commerce
version/adobe commerce/1.3.3
version/adobe commerce/1.3.3-p10
version/adobe commerce/1.3.4
version/adobe commerce/1.3.4-p9
version/adobe commerce/1.3.5
version/adobe commerce/1.3.5-p7
version/adobe commerce/1.4.2
version/adobe commerce/1.4.2-p1
version/adobe commerce/1.4.2-p2
canonical/adobe magento open source
version/adobe magento open source/2.4.4
version/adobe magento open source/2.4.4-p1
version/adobe magento open source/2.4.4-p10
version/adobe magento open source/2.4.4-p2
version/adobe magento open source/2.4.4-p3
version/adobe magento open source/2.4.4-p4
version/adobe magento open source/2.4.4-p5
version/adobe magento open source/2.4.4-p6
version/adobe magento open source/2.4.4-p7
version/adobe magento open source/2.4.4-p8
version/adobe magento open source/2.4.4-p9
version/adobe magento open source/2.4.5
version/adobe magento open source/2.4.5-p1
version/adobe magento open source/2.4.5-p2
version/adobe magento open source/2.4.5-p3
version/adobe magento open source/2.4.5-p4
version/adobe magento open source/2.4.5-p5
version/adobe magento open source/2.4.5-p6
version/adobe magento open source/2.4.5-p7
version/adobe magento open source/2.4.5-p8
version/adobe magento open source/2.4.5-p9
version/adobe magento open source/2.4.6
version/adobe magento open source/2.4.6-p1
version/adobe magento open source/2.4.6-p2
version/adobe magento open source/2.4.6-p3
version/adobe magento open source/2.4.6-p4
version/adobe magento open source/2.4.6-p5
version/adobe magento open source/2.4.6-p6
version/adobe magento open source/2.4.6-p7
version/adobe magento open source/2.4.7
version/adobe magento open source/2.4.7-b1
version/adobe magento open source/2.4.7-p1
version/adobe magento open source/2.4.7-p2
version/adobe magento commerce/2.3.7
version/adobe magento commerce/2.3.7-p1
version/adobe magento commerce/2.3.7-p2
version/adobe magento commerce/2.3.7-p3
version/adobe magento commerce/2.3.7-p4
version/adobe magento commerce/2.3.7-p4-ext1
version/adobe magento commerce/2.3.7-p4-ext2
version/adobe magento commerce/2.3.7-p4-ext3
version/adobe magento commerce/2.3.7-p4-ext4
version/adobe magento commerce/2.4.0
version/adobe magento commerce/2.4.0-ext-1
version/adobe magento commerce/2.4.0-ext-2
version/adobe magento commerce/2.4.0-ext-3
version/adobe magento commerce/2.4.0-ext-4
version/adobe magento commerce/2.4.1
version/adobe magento commerce/2.4.1-ext-1
version/adobe magento commerce/2.4.1-ext-2
version/adobe magento commerce/2.4.1-ext-3
version/adobe magento commerce/2.4.1-ext-4
version/adobe magento commerce/2.4.2
version/adobe magento commerce/2.4.2-ext-1
version/adobe magento commerce/2.4.2-ext-2
version/adobe magento commerce/2.4.2-ext-3
version/adobe magento commerce/2.4.2-ext-4
version/adobe magento commerce/2.4.2-p1
version/adobe magento commerce/2.4.2-p2
version/adobe magento commerce/2.4.3
version/adobe magento commerce/2.4.3-ext-1
version/adobe magento commerce/2.4.3-ext-2
version/adobe magento commerce/2.4.3-ext-3
version/adobe magento commerce/2.4.3-ext-4
version/adobe magento commerce/2.4.3-p1
version/adobe magento commerce/2.4.3-p2
version/adobe magento open source/2.4.3