Vulnerabilities > CVE-2022-0732 - Authorization Bypass Through User-Controlled Key vulnerability in 1Byte products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 9 |