CVE-2021-21026

Name of the Vulnerable Software and Affected Versions Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier

Description The issue is related to improper authorization in the integrations module of Magento Commerce, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can be achieved by accessing the admin console.

Recommendations For versions 2.4.1 and earlier, update to a version that includes the fix for the improper authorization vulnerability. For versions 2.4.0-p1 and earlier, update to a version that includes the fix for the improper authorization vulnerability. For versions 2.3.6 and earlier, update to a version that includes the fix for the improper authorization vulnerability.