CVE-2024-5166 | BDVDB-2026-237202 Detail
Google CloudLooker
Description#
An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.
Impact#
CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.