Crimson Agility

Digital Commerce Experts

Site Security, Health, & Performance

Adobe Commerce & Magento Open Source Security Update | APSB24-73 / CVE-2024-45115

Adobe Security Bulletin – APSB24-73

On October 8, 2024, Adobe released a critical security update for Adobe Commerce, Magento Open Source, and the Adobe Commerce Webhooks Plugin. This update is part of Adobe’s regular security maintenance and addresses vulnerabilities classified as critical, important, and moderate. It is essential for merchants and administrators to implement these updates promptly to avoid potential security risks.

Security update available for Adobe Commerce | APSB24-73

REQUEST HELP

Key Details of the Security Update

Adobe’s security patch resolves multiple vulnerabilities that, if exploited, could lead to:

  • Arbitrary Code Execution – Unauthorized execution of code on affected systems.
  • Arbitrary File System Read – Unauthorized access to files and data stored within the file system.
  • Security Feature Bypass – Circumvention of critical security protocols.
  • Privilege Escalation – Unauthorized escalation of user privileges, allowing attackers to gain elevated access within the system.

These vulnerabilities could potentially expose sensitive customer data, compromise the system’s integrity, and disrupt site operations if not promptly addressed. Full details on this update can be found in Adobe’s official security bulletin.

CVE-2024-45115: B2B Module Vulnerability

Of particular note is CVE-2024-45115, a vulnerability specific to the B2B module in Adobe Commerce. Adobe has provided an isolated patch to expedite the remediation process for this vulnerability. It’s crucial for businesses using the B2B module to apply this patch immediately to avoid potential exploitation risks associated with CVE-2024-45115.

Who Should Apply These Updates?

Adobe recommends that all merchants using Adobe Commerce, Magento Open Source, and the Adobe Commerce Webhooks Plugin apply these updates as soon as possible. Here are some guidelines for different customer types:

  • Adobe Commerce on Managed Services Customers: If you are on Adobe’s Managed Services, your Customer Success Engineer (CSE) can assist with applying these updates and provide any necessary guidance.
  • Self-hosted Adobe Commerce and Magento Open Source Customers: Work with your development and security teams to apply the patches as quickly as possible. Third-party support partners can also assist with implementing these updates if needed.

Failure to implement these patches in a timely manner could leave your systems exposed to significant security risks. Adobe will have limited resources available to help remediate issues for environments that have not been updated.

Staying Up-to-Date on Adobe Commerce Security

Adobe releases regular updates to improve the security and stability of Adobe Commerce and Magento Open Source. To stay informed about these updates and the best security practices, bookmark the Adobe Security Bulletins page. By regularly checking this page, you’ll be able to keep up with the latest security patches and updates from Adobe.

Need Assistance?

For further assistance with implementing these security updates, please contact your Adobe Customer Success Engineer or reach out to your technical support provider. Staying proactive with security updates is a vital part of maintaining a secure and trusted eCommerce environment for your business and customers.

For more detailed information on this update and to view the official Adobe security bulletin, visit the Adobe link provided above.

If you are using one of these versions, it is recommended that you take action immediately. Contact Crimson Agility if you need help.

Adobe Commerce/Magento Support Services

Crimson Agility Managed Services & Support can help identify if your site has been compromised, install the required patch, and remediate any related issues.

With Managed Services from Crimson Agility, you can expect:

  • Our team of experienced, certified developers will ensure a successful, hassle-free installation of the latest security patches without disruption to customers or business operations.
  • Our quality team will rigorously test your website to verify that the patches are properly applied and the site is secure.
  • Regularly updating your site with the newest security patches strengthens its defenses against potential threats, ensuring the protection of customer data and your business reputation.
  • We proactively monitor Adobe Commerce and Magento Open Source releases continuously, allowing you to focus on your business with confidence.

Act now to safeguard your business from security vulnerabilities with our Magento Developer Support. Don’t risk waiting until it’s too late!

Final Thoughts

Security is a continuous process, and keeping your eCommerce platform up to date with the latest patches is essential for protecting your business. The APSB24-73 update is a critical measure to safeguard your system from known vulnerabilities. Don’t wait—apply the update today and maintain the integrity and security of your online operations.

For comprehensive protection, we also provide the following services:

  • Security Scans & Monitoring: Ongoing monitoring of your site to protect you and your customers.
  • Health & Security Audit: Identifies and addresses potential security threats to ensure your site’s safety.

Receive professionally managed and monitored security for your online store with Crimson Agility – your trusted Magento and Adobe Commerce security partner.

If you have any questions or would like to discuss your specific needs, please don’t hesitate to contact our team or call us at (480) 506-0482. We are here to help you maintain the highest level of security for your Adobe Commerce or Magento store.

By keeping your Adobe Commerce platform up to date, you are taking proactive steps to protect your business and your customers from potential security threats.

GET A QUOTE TODAY

Best regards,
The Crimson Agility Team

Other Security Articles