What is the severity of CVE-2024-45124?

CVE-2024-45124 has a low impact severity rating due to its potential for a security feature bypass.

How do I fix CVE-2024-45124?

To remediate CVE-2024-45124, upgrade to one of the following versions: 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.

Which Adobe Commerce versions are affected by CVE-2024-45124?

CVE-2024-45124 impacts Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier.

Can this vulnerability be exploited remotely in CVE-2024-45124?

Yes, an attacker can exploit CVE-2024-45124 remotely if the vulnerable versions of Adobe Commerce are accessible.

What type of vulnerability is CVE-2024-45124?

CVE-2024-45124 is categorized as an Improper Access Control vulnerability.

Vulnerability/
CVE-2024-45124

medium

5.3

CWE

284

10/10/2024

11/10/2024

CVE-2024-45124: Adobe Commerce | Improper Access Control (CWE-284)

First published: Thu Oct 10 2024(Updated: )

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.

Credit: psirt@adobe.com psirt@adobe.com

Affected Software	Affected Version	How to fix
composer/magento/community-edition	=2.4.4
composer/magento/community-edition	=2.4.5
composer/magento/community-edition	=2.4.6
composer/magento/community-edition	=2.4.7
composer/magento/community-edition	<2.4.4-p11	2.4.4-p11
composer/magento/community-edition	>=2.4.5-p1<2.4.5-p10	2.4.5-p10
composer/magento/community-edition	>=2.4.6-p1<2.4.6-p8	2.4.6-p8
composer/magento/community-edition	>=2.4.7-beta1<2.4.7-p3	2.4.7-p3
Adobe Magento Commerce
Adobe Magento Commerce	=2.3.7
Adobe Magento Commerce	=2.3.7-p1
Adobe Magento Commerce	=2.3.7-p2
Adobe Magento Commerce	=2.3.7-p3
Adobe Magento Commerce	=2.3.7-p4
Adobe Magento Commerce	=2.3.7-p4-ext1
Adobe Magento Commerce	=2.3.7-p4-ext2
Adobe Magento Commerce	=2.3.7-p4-ext3
Adobe Magento Commerce	=2.3.7-p4-ext4
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0-ext-1
Adobe Magento Commerce	=2.4.0-ext-2
Adobe Magento Commerce	=2.4.0-ext-3
Adobe Magento Commerce	=2.4.0-ext-4
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1-ext-1
Adobe Magento Commerce	=2.4.1-ext-2
Adobe Magento Commerce	=2.4.1-ext-3
Adobe Magento Commerce	=2.4.1-ext-4
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2-ext-1
Adobe Magento Commerce	=2.4.2-ext-2
Adobe Magento Commerce	=2.4.2-ext-3
Adobe Magento Commerce	=2.4.2-ext-4
Adobe Magento Commerce	=2.4.2-p1
Adobe Magento Commerce	=2.4.2-p2
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3-ext-1
Adobe Magento Commerce	=2.4.3-ext-2
Adobe Magento Commerce	=2.4.3-ext-3
Adobe Magento Commerce	=2.4.3-ext-4
Adobe Magento Commerce	=2.4.3-p1
Adobe Magento Commerce	=2.4.3-p2
Adobe Magento Commerce	=2.4.4
Adobe Magento Commerce	=2.4.4-p1
Adobe Magento Commerce	=2.4.4-p10
Adobe Magento Commerce	=2.4.4-p2
Adobe Magento Commerce	=2.4.4-p3
Adobe Magento Commerce	=2.4.4-p4
Adobe Magento Commerce	=2.4.4-p5
Adobe Magento Commerce	=2.4.4-p6
Adobe Magento Commerce	=2.4.4-p7
Adobe Magento Commerce	=2.4.4-p8
Adobe Magento Commerce	=2.4.4-p9
Adobe Magento Commerce	=2.4.5
Adobe Magento Commerce	=2.4.5-p1
Adobe Magento Commerce	=2.4.5-p2
Adobe Magento Commerce	=2.4.5-p3
Adobe Magento Commerce	=2.4.5-p4
Adobe Magento Commerce	=2.4.5-p5
Adobe Magento Commerce	=2.4.5-p6
Adobe Magento Commerce	=2.4.5-p7
Adobe Magento Commerce	=2.4.5-p8
Adobe Magento Commerce	=2.4.5-p9
Adobe Magento Commerce	=2.4.6
Adobe Magento Commerce	=2.4.6-p1
Adobe Magento Commerce	=2.4.6-p2
Adobe Magento Commerce	=2.4.6-p3
Adobe Magento Commerce	=2.4.6-p4
Adobe Magento Commerce	=2.4.6-p5
Adobe Magento Commerce	=2.4.6-p6
Adobe Magento Commerce	=2.4.6-p7
Adobe Magento Commerce	=2.4.7
Adobe Magento Commerce	=2.4.7-b1
Adobe Magento Commerce	=2.4.7-b2
Adobe Magento Commerce	=2.4.7-p1
Adobe Magento Commerce	=2.4.7-p2
Adobe Commerce	=1.3.3
Adobe Commerce	=1.3.3-p10
Adobe Commerce	=1.3.4
Adobe Commerce	=1.3.4-p9
Adobe Commerce	=1.3.5
Adobe Commerce	=1.3.5-p7
Adobe Commerce	=1.4.2
Adobe Commerce	=1.4.2-p1
Adobe Commerce	=1.4.2-p2
Adobe Magento Open Source
Adobe Magento Open Source	=2.4.3
Adobe Magento Open Source	=2.4.4
Adobe Magento Open Source	=2.4.4-p1
Adobe Magento Open Source	=2.4.4-p10
Adobe Magento Open Source	=2.4.4-p2
Adobe Magento Open Source	=2.4.4-p3
Adobe Magento Open Source	=2.4.4-p4
Adobe Magento Open Source	=2.4.4-p5
Adobe Magento Open Source	=2.4.4-p6
Adobe Magento Open Source	=2.4.4-p7
Adobe Magento Open Source	=2.4.4-p8
Adobe Magento Open Source	=2.4.4-p9
Adobe Magento Open Source	=2.4.5
Adobe Magento Open Source	=2.4.5-p1
Adobe Magento Open Source	=2.4.5-p2
Adobe Magento Open Source	=2.4.5-p3
Adobe Magento Open Source	=2.4.5-p4
Adobe Magento Open Source	=2.4.5-p5
Adobe Magento Open Source	=2.4.5-p6
Adobe Magento Open Source	=2.4.5-p7
Adobe Magento Open Source	=2.4.5-p8
Adobe Magento Open Source	=2.4.5-p9
Adobe Magento Open Source	=2.4.6
Adobe Magento Open Source	=2.4.6-p1
Adobe Magento Open Source	=2.4.6-p2
Adobe Magento Open Source	=2.4.6-p3
Adobe Magento Open Source	=2.4.6-p4
Adobe Magento Open Source	=2.4.6-p5
Adobe Magento Open Source	=2.4.6-p6
Adobe Magento Open Source	=2.4.6-p7
Adobe Magento Open Source	=2.4.7
Adobe Magento Open Source	=2.4.7-b1
Adobe Magento Open Source	=2.4.7-p1
Adobe Magento Open Source	=2.4.7-p2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-45124?
CVE-2024-45124 has a low impact severity rating due to its potential for a security feature bypass.
How do I fix CVE-2024-45124?
To remediate CVE-2024-45124, upgrade to one of the following versions: 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.
Which Adobe Commerce versions are affected by CVE-2024-45124?
CVE-2024-45124 impacts Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier.
Can this vulnerability be exploited remotely in CVE-2024-45124?
Yes, an attacker can exploit CVE-2024-45124 remotely if the vulnerable versions of Adobe Commerce are accessible.
What type of vulnerability is CVE-2024-45124?
CVE-2024-45124 is categorized as an Improper Access Control vulnerability.

agent/weakness
agent/title
agent/first-publish-date
agent/type
agent/severity
collector/github-advisory-latest
source/GitHub
alias/GHSA-w3p2-pc3h-69wv
alias/CVE-2024-45124
agent/software-canonical-lookup
agent/references
agent/description
agent/author
agent/last-modified-date
collector/mitre-cve
source/MITRE
agent/event
collector/github-advisory
agent/trending
agent/source
agent/tags
collector/nvd-cve
source/NVD
agent/software-canonical-lookup-request
collector/nvd-api
agent/softwarecombine
package-manager/composer
vendor/adobe
canonical/adobe magento commerce
version/adobe magento commerce/2.3.7
version/adobe magento commerce/2.3.7-p1
version/adobe magento commerce/2.3.7-p2
version/adobe magento commerce/2.3.7-p3
version/adobe magento commerce/2.3.7-p4
version/adobe magento commerce/2.3.7-p4-ext1
version/adobe magento commerce/2.3.7-p4-ext2
version/adobe magento commerce/2.3.7-p4-ext3
version/adobe magento commerce/2.3.7-p4-ext4
version/adobe magento commerce/2.4.0
version/adobe magento commerce/2.4.0-ext-1
version/adobe magento commerce/2.4.0-ext-2
version/adobe magento commerce/2.4.0-ext-3
version/adobe magento commerce/2.4.0-ext-4
version/adobe magento commerce/2.4.1
version/adobe magento commerce/2.4.1-ext-1
version/adobe magento commerce/2.4.1-ext-2
version/adobe magento commerce/2.4.1-ext-3
version/adobe magento commerce/2.4.1-ext-4
version/adobe magento commerce/2.4.2
version/adobe magento commerce/2.4.2-ext-1
version/adobe magento commerce/2.4.2-ext-2
version/adobe magento commerce/2.4.2-ext-3
version/adobe magento commerce/2.4.2-ext-4
version/adobe magento commerce/2.4.2-p1
version/adobe magento commerce/2.4.2-p2
version/adobe magento commerce/2.4.3
version/adobe magento commerce/2.4.3-ext-1
version/adobe magento commerce/2.4.3-ext-2
version/adobe magento commerce/2.4.3-ext-3
version/adobe magento commerce/2.4.3-ext-4
version/adobe magento commerce/2.4.3-p1
version/adobe magento commerce/2.4.3-p2
version/adobe magento commerce/2.4.4
version/adobe magento commerce/2.4.4-p1
version/adobe magento commerce/2.4.4-p10
version/adobe magento commerce/2.4.4-p2
version/adobe magento commerce/2.4.4-p3
version/adobe magento commerce/2.4.4-p4
version/adobe magento commerce/2.4.4-p5
version/adobe magento commerce/2.4.4-p6
version/adobe magento commerce/2.4.4-p7
version/adobe magento commerce/2.4.4-p8
version/adobe magento commerce/2.4.4-p9
version/adobe magento commerce/2.4.5
version/adobe magento commerce/2.4.5-p1
version/adobe magento commerce/2.4.5-p2
version/adobe magento commerce/2.4.5-p3
version/adobe magento commerce/2.4.5-p4
version/adobe magento commerce/2.4.5-p5
version/adobe magento commerce/2.4.5-p6
version/adobe magento commerce/2.4.5-p7
version/adobe magento commerce/2.4.5-p8
version/adobe magento commerce/2.4.5-p9
version/adobe magento commerce/2.4.6
version/adobe magento commerce/2.4.6-p1
version/adobe magento commerce/2.4.6-p2
version/adobe magento commerce/2.4.6-p3
version/adobe magento commerce/2.4.6-p4
version/adobe magento commerce/2.4.6-p5
version/adobe magento commerce/2.4.6-p6
version/adobe magento commerce/2.4.6-p7
version/adobe magento commerce/2.4.7
version/adobe magento commerce/2.4.7-b1
version/adobe magento commerce/2.4.7-b2
version/adobe magento commerce/2.4.7-p1
version/adobe magento commerce/2.4.7-p2
canonical/adobe commerce
version/adobe commerce/1.3.3
version/adobe commerce/1.3.3-p10
version/adobe commerce/1.3.4
version/adobe commerce/1.3.4-p9
version/adobe commerce/1.3.5
version/adobe commerce/1.3.5-p7
version/adobe commerce/1.4.2
version/adobe commerce/1.4.2-p1
version/adobe commerce/1.4.2-p2
canonical/adobe magento open source
version/adobe magento open source/2.4.3
version/adobe magento open source/2.4.4
version/adobe magento open source/2.4.4-p1
version/adobe magento open source/2.4.4-p10
version/adobe magento open source/2.4.4-p2
version/adobe magento open source/2.4.4-p3
version/adobe magento open source/2.4.4-p4
version/adobe magento open source/2.4.4-p5
version/adobe magento open source/2.4.4-p6
version/adobe magento open source/2.4.4-p7
version/adobe magento open source/2.4.4-p8
version/adobe magento open source/2.4.4-p9
version/adobe magento open source/2.4.5
version/adobe magento open source/2.4.5-p1
version/adobe magento open source/2.4.5-p2
version/adobe magento open source/2.4.5-p3
version/adobe magento open source/2.4.5-p4
version/adobe magento open source/2.4.5-p5
version/adobe magento open source/2.4.5-p6
version/adobe magento open source/2.4.5-p7
version/adobe magento open source/2.4.5-p8
version/adobe magento open source/2.4.5-p9
version/adobe magento open source/2.4.6
version/adobe magento open source/2.4.6-p1
version/adobe magento open source/2.4.6-p2
version/adobe magento open source/2.4.6-p3
version/adobe magento open source/2.4.6-p4
version/adobe magento open source/2.4.6-p5
version/adobe magento open source/2.4.6-p6
version/adobe magento open source/2.4.6-p7
version/adobe magento open source/2.4.7
version/adobe magento open source/2.4.7-b1
version/adobe magento open source/2.4.7-p1
version/adobe magento open source/2.4.7-p2