Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2193

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via par

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HYPR

Description

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HYPR HYPR Server

  • unspecified to < 6.14.1affected

References