CoreCVE
Back

HIGH

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page

Published Jul 19, 2022

Description

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-280

CWE-639

Authorization Bypass

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner HYPR
Published Jul 19, 2022
Updated Aug 3, 2024
Reserved Jun 23, 2022
Link CVE-2022-2193
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-2193
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-2193
ENISA EUVD
Assigner HYPR
Published Jul 19, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-34476
EUVD-2022-34476