CVE-2022-0732

CVE-2022-0732

Vendor 1Byte
Product Copy9
Weakness CWE-284
Published February 24, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.

Key dates

02Disclosure timeline

February 24, 2022 CVE published
September 16, 2024 Record updated