CoreCVE
Back

MEDIUM

An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter)

Published Nov 7, 2019

Description

An Insecure Direct Object Reference (IDOR) vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to change other candidates' personal information (first name, last name, email, CV, phone number, and all other personal information) by changing the value of the candidate id (the id parameter).

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 7, 2019
Updated Aug 5, 2024
Reserved Oct 15, 2019
Link CVE-2019-17604
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-17604
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-17604