Bishoy Roufael

**Name of the Vulnerable Software and Affected Versions** Miele AppWash MobileApp (affected versions not specified) **Description** The issue concerns an API endpoint used by Miele's AppWash MobileApp, which was vulnerable to an authorization bypass. A low-privileged, remote attacker could gain read and partial write access to other users' data by modifying a small part of an HTTP request sent to the API. However, reading or changing the password of another user was not possible, resulting in no impact to availability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.