← CVE Intelligence

CVE-2022-2193

HYPR / HYPR Server PUBLISHED

Description (CNA)

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.

Affected (CNA)

Vendor / productVersions
HYPR / HYPR Serveraffected unspecified before 6.14.1

CWE

CWE-280

References

ADP enrichment

CVE

No English description supplied.