CVE-2023-6724 HIGH

CVE-2023-6724: IDOR in Simgesel Software's Hearing Tracking System (Barosel)

Vendor Software Engineering Consultancy Machine Equipment Limited Company
Product Hearing Tracking System
Weakness CWE-639 · IDOR
Published February 9, 2024
Last update May 20, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Limited Company Hearing Tracking System allows Authentication Abuse. This issue affects Hearing Tracking System: before for IOS 7.0, for Android Latest release 1.0.

Key dates

02Disclosure timeline

February 9, 2024 CVE published
May 20, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-39384 FreeScout Customer Merge Cross-Mailbox Authorization Bypass CVE-2026-6571 kodcloud KodExplorer systemRole.class.php roleGroupAction authorization CVE-2026-5845 Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server CVE-2026-7651 User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter CVE-2026-24773 Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files