Adisyonpro
Monthly
Authorization bypass via user-controlled key in Summit Security Systems AdisyonPro (all versions before v5.21.0) allows unauthenticated remote attackers to access application functionality that should be restricted by access control lists, resulting in integrity and availability impact. The flaw is classified as CWE-639, an Insecure Direct Object Reference (IDOR)-class weakness in which the application accepts user-supplied keys to gate access to protected resources without adequate server-side authorization validation. No public exploit code or active exploitation has been identified at time of analysis.
Authorization bypass via user-controlled key in Summit Security Systems AdisyonPro (all versions before v5.21.0) allows unauthenticated remote attackers to access application functionality that should be restricted by access control lists, resulting in integrity and availability impact. The flaw is classified as CWE-639, an Insecure Direct Object Reference (IDOR)-class weakness in which the application accepts user-supplied keys to gate access to protected resources without adequate server-side authorization validation. No public exploit code or active exploitation has been identified at time of analysis.