CVE-2022-34259

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.3-p2 and earlier Adobe Commerce versions 2.3.7-p3 and earlier Adobe Commerce versions 2.4.4 and earlier

Description The issue is related to an Improper Access Control that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction. It is also associated with incorrect clearance or release of resources, which may allow a remote attacker to cause a denial of service.

Recommendations For Adobe Commerce versions 2.4.3-p2 and earlier, update to a version later than 2.4.3-p2 to resolve the issue. For Adobe Commerce versions 2.3.7-p3 and earlier, update to a version later than 2.3.7-p3 to resolve the issue. For Adobe Commerce versions 2.4.4 and earlier, update to a version later than 2.4.4 to resolve the issue.