CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- gitlab, gitlab ce/ee +1 moreAn issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >=...4.3 Medium
- glpi-project glpiIn GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).4.3 Medium
- glpi-project glpiIn GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.)…4.3 Medium
- cisco roomos, telepresence endpoint software (tc/ce), telepresence collaboration endpoint +2 moreCisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability5.5 Medium
- citadel webcitAn Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows...6.5 Medium
- nextcloud deckMissing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference...4.3 Medium
- ge asset performance management classicGE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR)...5.3 Medium
- verint workforce optimizationVerint Workforce Optimization suite 15.1 (15.1.0.37634) has Unauthenticated Information...5.3 Medium
- 1crmAn issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to...8.6 High
- open-xchange appsuiteOX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request...4.3 Medium
- dbhcms project dbhcmsDBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file']...4.9 Medium
- [unknown] cloudformsRed Hat Security Advisory: CloudForms 5.0.7 bug fix and enhancement update6.5 Medium
- openbsdiked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has...9.8 Critical
- apache ofbizIDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz...5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles...4.3 Medium
- linkplayAn issue was discovered on various devices via the Linkplay firmware. There is WAN remote code...9.8 Critical
- acf to rest api project to rest apiacf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation7.5 High
- mattermost serverMattermost Server has intermittent Authorization bypass for resource-owners8.1 High
- mattermost serverMattermost Server allows users with a session ID to revoke another users' session4.3 Medium
- citrix xenapp** VERSION NOT SUPPORTED WHEN ASSIGNED ** Citrix XenApp 6.5, when 2FA is enabled, allows a remote...5.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreAn Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker...7.7 High
- tecnick tcexamImproper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker...4.3 Medium
- oklok project oklokThe OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote...6.5 Medium
- pagerduty rundeckIDOR can reveal execution data and logs to unauthorized user in Rundeck6.5 Medium
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged...4.3 Medium
- broadcom ca api developer portal, ca technologies api developer portal +1 moreCA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which...9.8 Critical
- subex roc partner settlementAn Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex...8.8 High
- cipplanner cipaceAn Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build...7.5 High
- dnnsoftware dotnetnukeThere is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in...4.3 Medium
- totemo totemomailAn insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated...5.4 Medium
- piwigoThe Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in...4.3 Medium
- harriscomputer ormed misHarris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms...4.3 Medium
- lix project lixMachine-In-The-Middle in lix8.1 High
- dradisframework dradisThe API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this...6.5 Medium
- granditGRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions,...6.5 Medium
- atos unify openscape uc web clientAtos Unify OpenScape UC Web Client 1.0 allows remote attackers to obtain sensitive information....7.5 High
- abb asset suiteAsset Suite Direct Object Reference Access7.1 High
- biscom secure file transferBiscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows...6.5 Medium
- gitlab, gitlab ee +1 moreAn IDOR exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...5.3 Medium
- gitlab, gitlab ce/ee +1 moreAn IDOR was discovered in GitLab CE/EE 11.5 and later that allowed new merge requests endpoint to...4.3 Medium
- gitlab, gitlab ee +1 moreAn IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and...5.3 Medium
- cerberusftp ftp serverThe zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip...5.4 Medium
- cththemes citybook, easybook, townhub +2 moreThe CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for...7.5 High
- ultimatemember ultimate memberMultiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the...5.3 Medium
- gitlabGitLab Enterprise Edition (EE) 11.3 and later through 12.5 allows an Insecure Direct Object...4.3 Medium
- mi dgnwg03lm firmware, mccgq01lm firmware, rtcgq01lm firmware +2 more +4 moreAn issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM 5.5.48...9.8 Critical
- gitlabAn IDOR vulnerability exists in GitLab <v12.1.2, <v12.0.4, and <v11.11.6 that allowed uploading...6.5 Medium
- xtivia web time and expenseAn Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense ...4.3 Medium
- dasanzhone znid 2426a firmwareThe web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated...8.8 High
- linksys velop whw0301 firmware, velop whw0302 firmware, velop whw0303 firmware +2 moreBelkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key...9.8 Critical
- Show moreLoading…