CVE-2025-60931

Summary

An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor

References

• https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor

• ←Previous
• Next→