CVE-2025-3014

Insecure direct object references (IDOR) in NightWolf Penetration Platform PUBLISHED

Description (CNA)

Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.

Affected (CNA)

Vendor / product	Versions
FPT Software / NightWolf Penetration Platform	affected 2.1.4; unaffected 2.1.5

CWE

CWE-285

References

https://bug.report.night-wolf.io/changelogs

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.