Description
Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/obtenerFamiliaUsuario" endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| T-INNOVA | Deporsite | v05.29.0907 | — |