CVE-2025-49550
Adobe Commerce | Incorrect Authorization (CWE-863)
En bref Sévérité MEDIUM 4.3 EPSS EPSS 0.37 % · centile 31 (2026-10-27) État PUBLISHED Publiée 2025-06-25 Mise à jour 2025-06-25 Attribuée par adobe Statut NVD Analyzed Description Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N adobe CVSS 3.1 MEDIUM 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N NVD · psirt@adobe.com (Secondary)
Faiblesses (CWE)
Avis
Références européennes
Configurations affectées (CPE NVD) cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:* < 1.3.3cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*+89 autres Produits affectés
Références
Sources
