Description
Herowatch Go Server developed by About Time Technologies has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify specific parameters to access or operate other users' data and functions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| About Time Technologies | Herowatch Go Server | all | — |
References
- https://www.twcert.org.tw/en/cp-139-11364-0dce6-2.html third-party-advisory
- https://www.twcert.org.tw/tw/cp-132-11366-d92ac-1.html third-party-advisory