« Volver al listado

CVE-2022-35692

Estado: ModificadaMedia (5.3)—

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account detials. Exploitation of this issue does not require user interaction.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Adobe — CommerceAdobe — Magento Commerce

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-35692",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-35692",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-23T13:06:14.616152Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@adobe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "Adobe",
          "product": "Magento Commerce",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "2.4.4"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "2.3.7-p3"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "2.4.3-p2"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom",
              "lessThanOrEqual": "None"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-19T23:15:09.857",
  "references": [
    {
      "url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@adobe.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account detials. Exploitation of this issue does not require user interaction."
    },
    {
      "lang": "es",
      "value": "Adobe Commerce versiones 2.4.3-p2 (y anteriores), 2.3.7-p3 (y anteriores) y 2.4.4 (y anteriores), están afectadas por una vulnerabilidad de Control de Acceso Inapropiado que podría resultar en una Omisión de la Función de Seguridad. Un atacante podría aprovechar esta vulnerabilidad para filtrar información menor de los datos de la cuenta de otro usuario. No es requerida una interacción del usuario para la explotación de este problema."
    }
  ],
  "lastModified": "2026-06-17T04:52:04.687",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "681C1BBA-897A-422E-8680-EB31ACC2B371",
              "versionEndExcluding": "2.4.4",
              "versionStartIncluding": "2.4.0"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.3.7:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04A312E3-692C-4076-8C67-C30C03875366"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.3.7:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19DD704B-AD3B-4CDF-9F7F-3604EE99F9F2"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.3.7:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD7B2AF1-582F-4FDF-B7FC-28E57329D68B"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.3.7:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74D62531-01C3-4F1B-A63F-4205BD16BAC1"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A4B2000-096E-4214-B167-2A134F723FE8"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.3:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDD2D4BF-8874-4C7F-A2DD-37604353D9DE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.3:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A7460AE-DC3C-444B-9A10-A9D6537059AE"
            },
            {
              "criteria": "cpe:2.3:a:adobe:magento_commerce:2.4.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0DC74D1-73EB-44D7-8DCA-15372C5F76AE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}