Description
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Tenable Identity Exposure | < 3.77.9 | 3.77.9 |
Medium · 4.3
CVE-2025-1091
EUVD-2025-5316GHSA-mmcm-44xw-5gf8
Broken Authorization Schema
Published Feb 25, 2025 · Updated Feb 26, 2025 · Assigned by tenable