T-INNOVA DeporSite Insecure Direct Object Reference Vulnerability

A vulnerability allowing Insecure Direct Object Reference (IDOR) has been identified in T-INNOVA's DeporSite application, specifically in versions prior to 02.14.1115. This vulnerability enables attackers to access or modify unauthorized resources by manipulating the 'idUsuario' parameter in a specific AJAX request. Such exploitation could result in the unauthorized exposure or alteration of confidential data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to or modification of sensitive data.

Remediation

Users can upgrade to T-INNOVA DeporSite version 2025 v02.14.1115 to address this vulnerability.