CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins google compute engine, jenkins project google compute engine plugin +1 moreJenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin5.9 Medium
- zyxel 2.00\(abbx.3\)ZyXEL P-1302-T10D v3 devices with firmware version 2.00(ABBX.3) and earlier do not properly...6.5 Medium
- eyecomms eyecmsAn Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15...4.3 Medium
- eyecomms eyecmsA mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to...8.8 High
- adobe magentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2...6.5 Medium
- code-atlantic popup makerAn issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated...9.1 Critical
- zabbixAn issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4....9.1 Critical
- thecontrolgroup voyagerAn issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin...7.2 High
- cactiIn Cacti through 1.2.6, authenticated users may bypass authorization checks (for viewing a graph)...4.3 Medium
- webkul bagistoAuthorization Bypass Through User-Controlled Key in Bagisto8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR...7.5 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...7.5 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...4.3 Medium
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...6.5 Medium
- centos-webpanel centos web panelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...6.5 Medium
- centos-webpanel centos web panelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows...6.5 Medium
- humanica humatrix 7The Recruitment module in Humanica Humatrix 7 1.0.0.681 and 1.0.0.203 allows remote attackers to...7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Access Control Bypass7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento Insecure Direct Object Reference (IDOR) vulnerability4.9 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR Vulnerability7.3 High
- adobe systems incorporated magento 2, magento +1 moreMagento Insufficient authorization check when adding users to company accounts6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR Vulnerability5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR Vulnerability7.5 High
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass...9.8 Critical
- control-webpanel webpanelIn CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can...8.8 High
- gitlabGitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is...7.5 High
- gitlabGitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct...4.3 Medium
- gitlabGitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1...4.3 Medium
- weseek growiIn WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL...7.5 High
- prestashopIn PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are...7.5 High
- thoughtspotAn authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 ...8.1 High
- joruri mail, sitebridge inc. joruri mail +1 moreJoruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to...5.4 Medium
- jetbrains youtrackAn Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was...9.8 Critical
- bluditBludit prior to 3.9.1 allows a non-privileged user to change the password of any account,...8.8 High
- zohocorp manageengine servicedesk plusIn Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can...6.5 Medium
- gitlabAn Incorrect Access Control (issue 1 of 2) was discovered in GitLab Community and Enterprise...5.4 Medium
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for iOS and Android before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...3.7 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and...9.8 Critical
- harmistechnology je messengerAn issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to...7.7 High
- ushareit shareitThe SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network...5.3 Medium
- logonbox nervepoint access managerAn unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint...9.4 Critical
- bigtreecms bigtree** DISPUTED ** BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that...2.7 Low
- wisetail learning management systemWisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR)...4.3 Medium
- monstraIn Monstra CMS 3.0.4, an attacker with 'Editor' privileges can change the password of the...8.8 High
- gleeztech gleezcmsGleez CMS Vulnerability Allows Forced Browsing to Profile Page of Other Users4.3 Medium
- proconfIn ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and...6.5 Medium
- vanillaforums vanilla forumsIn Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR)...4.3 Medium
- sage xrt treasurySage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions8.8 High
- Show moreLoading…