Veris · Report #123713
Insecure Direct 'org-visitor-log' References
Validstatus
1upvotes
18 Mar 2016disclosed
Summary
The particular issue was related to Insecure Direct Object Reference vulnerability where a particular API was not included in the main permission sets. So the enumeration attacks could be executed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.