Veris · Report #120288
Critical IDOR - Delete any terminal/gatekeeper of any organization remotely
Validstatus
3upvotes
12 Jun 2016disclosed
How it was found
Hello Team,
I have found a critical IDOR issue due to which an attacker can easily detele any terminal/gatekeeper of any organization by just changing the ID.
Proof of Concept: Please find the attached screenshots.
Best Regards,
Hely H. Shah