PT-2025-38757 · Ard · Ard
CVE-2025-55886
·
Publicado
2025-09-22
·
Atualizado
2025-09-22
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
ARD (affected versions not specified)
Description
An Insecure Direct Object Reference (IDOR) vulnerability exists in ARD. The flaw is located in the
fe uid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization. The affected API endpoint is /payment history.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Protection Mechanism Failure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ard