Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-40395 EUVD-2024-38439GHSA-gjcf-776g-8w8g

An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardles…

Published Aug 27, 2024 · Updated Mar 25, 2025 · Assigned by mitre

Description

An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level.

References