BIT-magento-2022-42344
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/magento/BIT-magento-2022-42344.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-magento-2022-42344
- Aliases
- Published
- 2024-03-06T10:55:33.798Z
- Modified
- 2026-03-20T10:00:20.086896Z
- Summary
- [CVE-2021-36032] Magento IDOR Leads to Account Takeover
- Details
-
Adobe Commerce versions 2.4.3 (and earlier), 2.3.7 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.
- Database specific
{ "severity": "High", "cpes": [ "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.3.7:-:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.3.7:p1:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.3.7:p2:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.3.7:p3:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.4.3:-:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.4.3:p1:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.4.3:p2:*:*:open_source:*:*:*", "cpe:2.3:a:magento:magento:2.4.4:-:*:*:open_source:*:*:*" ] }- References
Affected packages
Bitnami / magento
Package
- Name
- magento
- Purl
- pkg:bitnami/magento
Severity
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator