Michael Groberman

A specific administrative endpoint notifications is accessible without proper authentication.

A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

Development and test API endpoints are present that mirror production functionality.

Name of the Vulnerable Software and Affected Versions versions (affected versions not specified) Description An authenticated user can access other user profiles by manipulating the `id` number within an API call. This occurs through a specific API endpoint. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Gardyn (affected versions not specified) Description A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.