| शीर्षक | omega solution HRM OS latest Broken Access Control |
|---|
| विवरण | Omega Solution HRM OS contains a Broken Access Control vulnerability in the role permission retrieval endpoint. The endpoint accepts a user-controlled `roleId` parameter and returns the permission set associated with the requested role without verifying whether the authenticated user is authorized to access that role.
An authenticated low-privileged user can modify the `roleId` value to retrieve the permission configuration of arbitrary roles, including privileged administrator roles. This results in unauthorized disclosure of role permission assignments and internal authorization information.
Although subsequent requests to protected administrative functionality are correctly denied by server-side authorization, the affected endpoint itself fails to enforce object-level authorization, resulting in an Insecure Direct Object Reference (IDOR) vulnerability. An authenticated attacker can enumerate privileged role permissions and obtain sensitive authorization details that may facilitate further attacks against the application. |
|---|
| स्रोत | ⚠️ https://github.com/4m3rr0r/PoCVulDb/issues/20 |
|---|
| उपयोगकर्ता | 4m3rr0r (UID 85795) |
|---|
| सबमिशन | 17/07/2026 07:33 PM (2 महीनों पहले) |
|---|
| संयम | 20/09/2026 11:31 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 408063 [Omega Solution HRM OS तक 20260717 Role Permission Retrieval Endpoint permission roleId अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|