CWE-639: Insecure Direct Object Reference / IDOR
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
Also known as Authorization Bypass Through User-Controlled Key, Broken Object Level Authorization / BOLA, Horizontal Authorization.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- automattic activitypubActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure4.3 Medium
- apache inlongApache InLong: Jdbc Connection Security Bypass in InLong9.8 Critical
- adobe commerce, magento +1 moreIncorrect Authorization - Customer account takeover8.8 High
- grandingteco utime masterAn indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023 allows...6.5 Medium
- apache zookeeper, debian linux +1 moreApache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication9.1 Critical
- unknown wordpress file sharing pluginWordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR4.3 Medium
- elenos etg150 fm, etg150 firmware +1 moreAn Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in...6.5 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet...4.1 Medium
- wazuh wazuh-dashboard, wazuh-kibana-app +1 moreWazuh vulnerable to user privilege escalation8.8 High
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 moreAn issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive...6.7 Medium
- universitat politècnica de valència (upv) upv peix, upv peix +1 moreAuthorization Bypass on UPV PEIX5.3 Medium
- buddybossAuthorization Bypass on BuddyBoss5.4 Medium
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige8.8 High
- idm sistemas qsige qsigeMultiple vulnerabilities in IDM Sistemas QSige7.6 High
- economizzerEconomizzer Insecure Direct Object Reference vulnerability3.7 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...7.1 High
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure due to improper authorization. The following products are...3.5 Low
- acronis cyber protect 15, cyber protect +1 moreSensitive information disclosure and manipulation due to improper authorization. The following...4.6 Medium
- usta aybsIDOR in Usta AYBS8.8 High
- fl3xx crew, dispatch +1 moreAn Indirect Object Reference (IDOR) in Fl3xx Dispatch 2.10.37 and fl3xx Crew 2.10.37 allows a...6.5 Medium
- mpvanwinkle77 simplr registration form plus+, mikevanwinkle simplr registration form plus\+ +1 moreSimplr Registration Form Plus+ <= 2.4.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change8.8 High
- sap s\/4 hana, sap se s4 hana abap (manage checkbook apps) +1 moreInsecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)2.7 Low
- searchbloxCVE-2020-101308.8 High
- zkteco zem800, zem800 firmware +1 moreInsecure direct object reference in ZKTeco ZEM8008.3 High
- badgeosBadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion6.5 Medium
- badgeosBadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite4.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode4.3 Medium
- riverforest-wp all users messengerAll Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR4.3 Medium
- katsushi kawamori simple blog cardSimple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access4.3 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: challenge-response protocol bypass during agent registration6.5 Medium
- gravitl netmakerNetmaker IDOR Vulnerability Allows User to Update Other User's Password7.5 High
- phplistAn issue was discovered in phpList 3.6.12. Due to an access error, it was possible to manipulate...6.7 Medium
- unknown simple author boxSimple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR4.3 Medium
- tigergraphAn issue was discovered in Tigergraph Enterprise 3.7.0. There is unsecured write access to SSH...8.8 High
- cactiCacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a...7.5 High
- iagona scrutiswebCVE-2023-382577.5 High
- origin software ats proIDOR in ATS Pro9.8 Critical
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreAuthorization Bypass Through User-Controlled Key in alextselegidis/easyappointments6.3 Medium
- gitlabAuthorization Bypass Through User-Controlled Key in GitLab6.5 Medium
- getnet argentina para woocommerce project argentina para woocommerce, wanderlustcodes getnet argentina para woocommerce +1 moreThe Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass...7.5 High
- learndash, stellarwp learndash lms +1 moreLearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change8.8 High
- palantir foundry comments, com.palantir.comments:comments +1 moreIDOR in Foundry Comments allows retrieval of attachments5.3 Medium
- palantir foundry job-tracker, com.palantir.foundry.jobtracker:job-tracker +1 moreInsecure Direct Object Reference (IDOR) in Foundry job-tracker4.3 Medium
- ashanjay eventonEventON < 2.1.2 - Unauthenticated Post Access via IDOR5.3 Medium
- huawei emui, harmonyos +1 moreVulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers...9.8 Critical
- soluslabs solusvmInsecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker...8.8 High
- themeum tutor lmsTutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API7.5 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change8.8 High
- apple macosThis issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13....5.5 Medium
- joomsky js help desk, js help desk help desk, jshelpdesk +2 moreWordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)4.6 Medium
- Show moreLoading…