Option CloudGate Insecure Direct Object Reference Auth Bypass

The CloudGate M2M gateway from Option suffers from an insecure direct object reference that allows for authorization bypass as well as cross site scripting vulnerabilities.

Leave a Reply