Project: 
Commerce Core
Date: 
2018-August-29
Security risk: 
Moderately critical 14∕25 AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:Uncommon
Vulnerability: 
Access bypass
Affected versions: 
<2.9.0
Description: 

This module enables you to build eCommerce websites and applications with Drupal.

The module doesn't sufficiently check access for some of its entity types.

Solution: 

Update to Commerce 8.x-2.9.

Reported By: 
Fixed By: 
Coordinated By: