Vulnerability advisory
BIT-magento-2022-42344
[CVE-2021-36032] Magento IDOR Leads to Account Takeover
Also known as CVE-2022-42344GHSA-297f-r9w7-w492
Severity
Severity not reported.
Affected versions
magento Bitnami
| Affected | Fixed in |
|---|---|
| All versions before 2.3.7 | 2.3.7 |
2.4.0 to before 2.4.5 | 2.4.5 |
Severity for this package
| |
Description
Adobe Commerce versions 2.4.3 (and earlier), 2.3.7 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.