Exposure of Sensitive Information to an Unauthorized Actor
description
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
1
cwe_id
639
name
Authorization Bypass Through User-Controlled Key
description
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.