Meon Bidding Solutions Improper Access Control Vulnerability Allowing Unauthorized Data Manipulation

An improper access control vulnerability has been identified in Meon Bidding Solutions version 1.2. This vulnerability arises from inadequate authorization controls on specific API endpoints related to the initiation, modification, or cancellation of operations. An authenticated remote attacker could exploit this issue by manipulating parameters in the API request body, gaining unauthorized access to other user accounts. Successful exploitation would enable the attacker to perform authorized data manipulation on behalf of the accessed user accounts.

Impact

Exploitation of this vulnerability could result in unauthorized access to user accounts, allowing for unauthorized manipulation of data associated with those accounts.

Remediation

Users are advised to upgrade Meon Bidding Solutions to version 1.3.