A
n Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case records.
References
| Link | Resource |
|---|---|
| https://news.ycombinator.com/item?id=30502117 | Third Party Advisory |
| https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates | Issue Tracking Third Party Advisory US Government Resource |
| https://www.judyrecords.com/info | Third Party Advisory |
| https://www.judyrecords.com/what-happened-with-tyler-technologies | Exploit Technical Description Third Party Advisory |
| https://www.tylertech.com/dataharvest | Issue Tracking Vendor Advisory |
| https://news.ycombinator.com/item?id=30502117 | Third Party Advisory |
| https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates | Issue Tracking Third Party Advisory US Government Resource |
| https://www.judyrecords.com/info | Third Party Advisory |
| https://www.judyrecords.com/what-happened-with-tyler-technologies | Exploit Technical Description Third Party Advisory |
| https://www.tylertech.com/dataharvest | Issue Tracking Vendor Advisory |
Configurations
History
21 Nov 2024, 06:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://news.ycombinator.com/item?id=30502117 - Third Party Advisory | |
| References | () https://www.calbar.ca.gov/About-Us/News/Data-Breach-Updates - Issue Tracking, Third Party Advisory, US Government Resource | |
| References | () https://www.judyrecords.com/info - Third Party Advisory | |
| References | () https://www.judyrecords.com/what-happened-with-tyler-technologies - Exploit, Technical Description, Third Party Advisory | |
| References | () https://www.tylertech.com/dataharvest - Issue Tracking, Vendor Advisory |
Information
Published : 2022-04-18 15:15
Updated : 2024-11-21 06:54
NVD link : CVE-2022-26665
Mitre link : CVE-2022-26665
CVE.ORG link : CVE-2022-26665
JSON object : View
Products Affected
CWE
CWE-639
Authorization Bypass Through User-Controlled Key