mCarFix Motorists App Improper Access Control Vulnerability Allowing Account Misuse and Privacy Breaches

A vulnerability in the mCarFix Motorists App, version 2.3, developed by Paniel Mwaura, has been identified. This vulnerability involves improper access control, allowing attackers to bypass verification processes to register accounts arbitrarily. Additionally, by manipulating sequential numeric IDs, attackers could gain unauthorized access to user data and groups. Exploiting this vulnerability could lead to the creation of fake accounts, breaches of privacy, and misuse of the platform.

Impact

Exploitation of this vulnerability could result in unauthorized account creation, access to sensitive user data and groups, and potential misuse of the mCarFix platform.