Description
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Škoda Auto | Škoda Connect | — | — |