← CVE Intelligence

CVE-2024-5166

Insecure Direct Object Reference In Looker PUBLISHED

Description (CNA)

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

Affected (CNA)

Vendor / productVersions
Google Cloud / Lookeraffected 23.18; affected 23.20; affected 24.0; affected 24.2; affected 24.4; affected 24.6; affected 24.8; affected 24.10; affected 24.12; affected 24.14; affected 24.16; affected 24.18; affected 24.20

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.