all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

Insecure Direct Object Reference in Kiuwan SASTKiuwan provides an API endpoin...

Add to bookmarks
June 20, 2024, 12:36 p.m. |

CVE | THREATINT - NEW cve.threatint.com

Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access c...

access api application endpoint info information insecure insecure direct object reference name object parameter reference rest saas

Visit resource

More from cve.threatint.com / CVE | THREATINT - NEW

XWiki programming rights may be inherited by inclusionXWiki Platform is a gen... 2 days, 19 hours ago | cve.threatint.com
applications document gen may +8
FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response ParserFreeRTOS-Plus-TCP is... 2 days, 20 hours ago | cve.threatint.com
buffer dns domain domain names +8
Incorrect Address Range CalculationsIncorrect Calculation vulnerability in Re... 2 days, 20 hours ago | cve.threatint.com
address arm code firmware +3
Integer Underflow in Memory Range Check in Renesas RCARInteger Underflow (Wra... 2 days, 21 hours ago | cve.threatint.com
address arm bypassing check +6
um: Add winch to winch_handlers before registering winch IRQIn the Linux kern... 2 days, 21 hours ago | cve.threatint.com
kernel linux linux kernel may +1
Insufficient verification of data authenticity issue exists in NJ Series CPU ... 2 days, 21 hours ago | cve.threatint.com
authenticity cpu data issue +4
Unhashed Storage of PasswordThe decrypted configuration file contains the pas... 2 days, 22 hours ago | cve.threatint.com
can configuration file password +3
Bludit uses SHA1 as Password Hashing AlgorithmBludit uses the SHA-1 hashing a... 2 days, 22 hours ago | cve.threatint.com
addition algorithm attackers attacks +9
Bludit is Vulnerable to Session FixationA session fixation vulnerability in B... 2 days, 22 hours ago | cve.threatint.com
administrator attacker authentication bypass +6

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

Information Technology Specialist I: Windows Engineer

@ Los Angeles County Employees Retirement Association (LACERA) | Pasadena, California
View on infosec-jobs.com

Information Technology Specialist I, LACERA: Information Security Engineer

@ Los Angeles County Employees Retirement Association (LACERA) | Pasadena, CA
View on infosec-jobs.com

Linux System Administrator

@ Aretum | United States - Remote
View on infosec-jobs.com

Veritas Net Backup Administrator

@ GCyber | Arlington, VA
View on infosec-jobs.com

Enterprise Solutions Engineer, Southeast

@ Verkada | Orlando, FL United States
View on infosec-jobs.com

Enterprise Solutions Engineer, Midwest

@ Verkada | Chicago, IL United States
View on infosec-jobs.com