CVE-2024-39398

Summary

CVE-2024-39398 is a vulnerability affecting Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier. This issue involves an Improper Restriction of Excessive Authentication Attempts, allowing attackers to bypass security features and conduct brute force attacks. The vulnerability could result in unauthorized account access, but exploitation does not necessitate user interaction. The attack complexity is high, making it a significant threat to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.