CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- siemens teamcenter v12.4, teamcenter v13.0, teamcenter v13.1 +2 more +4 moreA vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter...8.8 High
- siemens industrial edge managementA vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An...9.8 Critical
- myfwc fish \| hunt flAn insecure, direct object vulnerability in hunting/fishing license retrieval function of the ...4.3 Medium
- nextcloud richdocuments, kiteworks security-advisories +1 moreFile Drop can be bypassed using Richdocuments app in nextcloud7.5 High
- nextcloud circles, kiteworks security-advisories +1 moreSecret Circle can be joined without approval in Nextcloud Circles6.5 Medium
- nextcloud deck, kiteworks security-advisories +1 moreCircle can be accessed by non-Circle members in Nextcloud Deck6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation8.3 High
- open-emr openemrOpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via...6.5 Medium
- vmware vrealize operations manager, cloud foundation, vrealize suite lifecycle manager +2 moreThe vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference...7.2 High
- lifterlms, unknown lms by lifterlms – online course, membership & learning management system plugin for wordpress +1 moreLifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR7.5 High
- runzero platform, shopware +1 moreInsecure direct object reference of log files of the Import/Export feature6.5 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-44.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-38.8 High
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-24.3 Medium
- larvata flygoLarvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-15.4 Medium
- akauntingAkaunting Authentication Bypass in Company Selection8.1 High
- cozmoslabs user profile pictureUser Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR5.4 Medium
- collabora onlineUnauthenticated attacker could gain access to currently open files9.8 Critical
- phone shop sales management system project shop sales management systemSourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object...4.3 Medium
- automattic jetpack, jetpack – wp security, backup, speed, & growth +1 moreJetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak5.3 Medium
- nextcloud end-to-end encryptionNextcloud End-to-End Encryption before 1.5.3, 1.6.3 and 1.7.1 suffers from a denial of service vulnerability due to permitting any authenticated users to lock files of other users.6.5 Medium
- annexcloud loyalty experience platformAn Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience...4.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows TCP/IP Driver Security Feature Bypass Vulnerability5.5 Medium
- fortinet fortipresenceTwo authorization bypass through user-controlled key vulnerabilities in the Fortinet...4.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreAttacker can obtain write access to any federated share/public link8.1 High
- purethemes listeoListeo < 1.6.11 - Multiple Authenticated IDOR Vulnerabilities6.5 Medium
- vfairsvFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference...4.3 Medium
- paxtechnology paxstorePax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control...8.1 High
- thedaylightstudio fuel cmsAn issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to...8.8 High
- glpi-project glpiInsecure Direct Object Reference (IDOR) on "Solutions"6.8 Medium
- glpi-project glpientities switch IDOR5.8 Medium
- nextcloud deckNextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability...4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Incorrect permissions Could Lead To Unauthorized Access5.3 Medium
- tufin securetrackInsecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions...5.7 Medium
- store-opart op\'art devisAn Insecure Direct Object Reference (IDOR) vulnerability was found in Prestashop Opart devis < 4...5.3 Medium
- nagios favoritesThe Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object...5.3 Medium
- atlassian jira, jira server, jira data center +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers to view the...4.3 Medium
flarum/tagsPackagistUsers can edit the tags of any discussionNo score- newbee-mall project newbee-mallnewbee-mall all versions are affected by incorrect access control to remotely gain privileges...7.5 High
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files...5.3 Medium
- adobe magento, magento commerce +1 moreMagento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure8.1 High
- adobe magento commerce, magento open source +1 moreMagento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information...2.3 Low
- mantisbtMantisBT Incorrect Authorization for bug_revision_view_page.php check7.5 High
- woocommerceWooCommerce Incorrect Authorization5.3 Medium
- tangro business workflowIn tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document...4.3 Medium
- tangro business workflowAn incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an...3.1 Low
- tangro business workflowIn tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in...6.5 Medium
- tangro business workflowIn tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download...5.3 Medium
- zyxel p1302-t10 v3 firmwareInsecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00...7.5 High
- Show moreLoading…