Description
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sony Electronics | Sony BRAVIA Digital Signage | <=1.7.8 | — |
References
- Zero Science Lab Disclosure (ZSL-2020-5611) third-party-advisory
- IBM X-Force Exchange Vulnerability Entry vdb-entry
- CXSecurity Vulnerability Listing third-party-advisory
- Packet Storm Security Exploit Archive exploit
- Sony Professional Display Software Product Page product
- BRAVIA Signage Software Resources product
- Sony BRAVIA Digital Signage Official Homepage product
- VulnCheck Advisory: Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR third-party-advisory