CVE-2022-0732CWE-284

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR…

published February 24, 2022

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02508 · 84.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-02-24T16:10Z
EPSS history
Timeline
  • 24 FEB 16:10Z
    The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR…
    cvelistv5