Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insecure Direct Object Reference (IDOR) in /tenants/{id} API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients via modification of the tenant ID in the request URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Inforcer Platform 安全漏洞
Vulnerability Description
Inforcer Platform是荷兰Inforcer公司的一个多租户管理平台。 Inforcer Platform 2.0.153版本存在安全漏洞，该漏洞源于/tenants/id API端点存在不安全的直接对象引用，可能导致低权限用户通过修改请求URL中的租户ID来枚举和访问其他客户端的租户信息。
CVSS Information
N/A
Vulnerability Type
N/A