Vulnerabilities > CVE-2020-13462 - Authorization Bypass Through User-Controlled Key vulnerability in Tufin Securetrack 18.1
Attack vector
ADJACENT_NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |