DerScanner
Home / Vulnerability Database / Kotlin : Insecure direct object references
Kotlin

Kotlin : Insecure direct object references

Classification

OWASP ASVS
Access ControlAccess ControlAccess ControlAccess ControlAccess Control
CWE
CWE-639

Overview

Insecure Direct Object Reference is an access control problem which allows an attacker to view data by manipulating an identifier (for example, a document or account number).

Direct object references are maps of an identifier to a resource; they are insecure direct object references if they allow an unauthorized user to access data.

References

  1. Insecure Direct Object Reference
  2. CWE-639: Authorization Bypass Through User-Controlled Key
  3. What are insecure direct object references (IDOR)?
MEDIUM

DerScanner Severity Score

Do you want to fix Kotlin : Insecure direct object references in your application?

See also

Kotlin

Kotlin : Missing required cryptographic step

Kotlin

Kotlin : Logging into system output

Kotlin

Kotlin : Call of notify() in synchronized block