← Back

CVE-2024-45120

nvd nist
Published: Oct 10, 2024Modified: Dec 12, 2024

JSON object

Loading...
3.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.6 / Impact: 1.4
Source: NVD (Secondary)

Description

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use of a resource, having a low impact on integrity. Exploitation of this issue requires user interaction.

Affected (76)

3 products
Commerce
Commerce B2b
Magento
Configuration A
76 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Version 2.4.4
Version 2.4.4 p10
Version 2.4.4 p1
Version 2.4.4 p2
Version 2.4.4 p3
Version 2.4.4 p4
Version 2.4.4 p5
Version 2.4.4 p6
Version 2.4.4 p7
Version 2.4.4 p8
Version 2.4.4 p9
Version 2.4.5
Version 2.4.5 p1
Version 2.4.5 p2
Version 2.4.5 p3
Version 2.4.5 p4
Version 2.4.5 p5
Version 2.4.5 p6
Version 2.4.5 p7
Version 2.4.5 p8
Version 2.4.5 p9
Version 2.4.6
Version 2.4.6 p1
Version 2.4.6 p2
Version 2.4.6 p3
Version 2.4.6 p4
Version 2.4.6 p5
Version 2.4.6 p6
Version 2.4.6 p7
Version 2.4.7
Version 2.4.7 b1
Version 2.4.7 b2
Version 2.4.7 p1
Version 2.4.7 p2
Adobe
Version 1.3.3
Version 1.3.3 p10
Version 1.3.4
Version 1.3.4 p9
Version 1.3.5
Version 1.3.5 p7
Version 1.4.2
Version 1.4.2 p1
Version 1.4.2 p2
Adobe
Version 2.4.4
Version 2.4.4 p10
Version 2.4.4 p1
Version 2.4.4 p2
Version 2.4.4 p3
Version 2.4.4 p4
Version 2.4.4 p5
Version 2.4.4 p6
Version 2.4.4 p7
Version 2.4.4 p8
Version 2.4.4 p9
Version 2.4.5
Version 2.4.5 p1
Version 2.4.5 p2
Version 2.4.5 p3
Version 2.4.5 p4
Version 2.4.5 p5
Version 2.4.5 p6
Version 2.4.5 p7
Version 2.4.5 p8
Version 2.4.5 p9
Version 2.4.6
Version 2.4.6 p1
Version 2.4.6 p2
Version 2.4.6 p3
Version 2.4.6 p4
Version 2.4.6 p5
Version 2.4.6 p6
Version 2.4.6 p7
Version 2.4.7
Version 2.4.7 b1
Version 2.4.7 p1
Version 2.4.7 p2

References (1)

Timeline

No history available yet.