Regeneration of API key by low level user: 500$ Access Control bug

I recently uncovered a flaw permits regular users to regenerate API keys for the test suite, utilizing an API endpoint originally designated for administrators only. This article outlines the issue, its potential impact, and the steps to reproduce the vulnerability.

Examkite(Virtual Name of bbp), a versatile continuous integration and delivery (CI/CD) platform, empowers development teams to streamline and automate their software delivery processes. This platform serves as the backbone for efficient collaboration, enabling teams to build, test, and …

access access control administrators api api keys article bug bug bounty continuous continuous integration control cybersecurity endpoint flaw hacking impact integration issue key keys low name programming regular test uncovered understanding virtual vulnerability