Skip to content
OpenAdvisories
High · 7.5 CVE-2022-2193 EUVD-2022-34476GHSA-v6fx-fw28-5wwr

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 au…

Published Jul 19, 2022 · Updated Aug 3, 2024 · Assigned by HYPR

Vendor: HYPR Product: HYPR Server

Description

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.

Affected products

VendorProductAffectedFixed
HYPR HYPR Server unspecified – < 6.14.1 6.14.1

References