Insecure direct object access: Insecure Direct Object References (IDOR) occur when an application provides direct access to objects based on user-supplied input. This vulnerability allows attackers to bypass authorization and access resources within the system by manipulating reference values. IDOR can lead to unauthorized data exposure, data modification, or execution of operations with objects such as files, database keys, or URLs.
Categories: CC D5: Security Operations | CCSP D4: Cloud Application Security | CISM D3: Information Security Program | CISSP D7: Security Operations | Security+ D2: Threats Vulnerabilities and Mitigations | SSCP D7: Systems and Application Security
« Back to Glossary Index