CVE-2022-34769

Michlol - rashim web interface Insecure direct object references (IDOR)

Medium · published August 5, 2022

CVSS v3.1
6.3
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

Michlol - rashim web interface Insecure direct object references (IDOR).

First of all, the attacker needs to login.

After he performs log into the system there are some functionalities that the specific user is not allowed to perform.

However all the attacker needs to do in order to achieve his goals is to change the value of the ptMsl parameter and then

the attacker can access sensitive data that he not supposed to access because its belong to another user.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.3th percentile
Published
2022-08-05T15:25Z
EPSS history
Timeline
  • 05 AUG 15:25Z
    Michlol - rashim web interface Insecure direct object references (IDOR)
    cvelistv5