PT-2022-17995 · Tyler · Tyler Odyssey Portal

Published 2022-04-18 · Updated 2022-09-03 · CVE-2022-26665

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tyler Odyssey Portal platform versions prior to 17.1.20

Description An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform. This may allow an external party to access sensitive case records.

Recommendations For versions prior to 17.1.20, update to version 17.1.20 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive case records until the update is applied.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2022-26665

Affected Products

Tyler Odyssey Portal

References · 10

• 🔥 https://judyrecords.com/what-happened-with-tyler-technologies · Exploit
• https://osv.dev/vulnerability/CVE-2022-26665 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26665 · Security Note
• https://tylertech.com/dataharvest · Vendor Advisory
• https://news.ycombinator.com/item?id=30502117 · Note
• https://t.me/cvenotify/29941 · Telegram Post
• https://judyrecords.com/info · Note
• https://t.me/cvenotify/35680 · Telegram Post
• https://t.me/cibsecurity/41011 · Telegram Post
• https://calbar.ca.gov/About-Us/News/Data-Breach-Updates · Note