CVE-2022-0732 | BDVDB-2026-170685 Detail

1ByteCopy9

Description#

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-284 Improper Access Control

References#

https://www.kb.cert.org/vuls/id/229438
https://cwe.mitre.org/data/definitions/284.html
https://techcrunch.com/2022/02/22/stalkerware-network-spilling-data/
https://kb.cert.org/vuls/id/229438

Exploit#

No public exploit known

History#

Version 12022-02-24Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.