CVE-2022-42344

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@adobe.com

Published

2022-10-20

Last modified

2024-09-16

Weaknesses

CWE-863

Affected products

• Adobe Commerce (Adobe)
• Commerce (Adobe)
• Magento (Magento)

References

• https://helpx.adobe.com/security/products/magento/apsb22-38.html