TeamViewer DEX Platform Broken Access Control Vulnerability

A broken access control vulnerability exists in the TeamViewer DEX Platform (On-Premises) in versions prior to 9.2. Certain backend API endpoints fail to properly enforce authorization checks, allowing low-privileged authenticated users to access resources and perform actions reserved for higher-privileged roles, such as administrative functions. This vulnerability could be exploited by an attacker with low-privileged credentials to gain unauthorized access to sensitive or administrative capabilities.

Impact

Exploitation of this vulnerability could lead to unauthorized access to administrative or sensitive functionalities within the TeamViewer DEX Platform.

Remediation

Users are advised to update to version 9.2 or the latest available version. The new version can be obtained through the TeamViewer Support Portal.