Veris · Report #123501
Insecure Direct Member Disclosure
Validstatus
1upvotes
18 Mar 2016disclosed
Summary
The particular issue was related to Insecure Direct Object Reference vulnerability where a particular API was not included in the main permission sets. So the enumeration attacks could be executed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.