CVE-2023-49112 - CVE House
Back to Database
Status published Unknown CVE-2023-49112

Insecure Direct Object Reference in Kiuwan SAST

Vulnerability Description

Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access control mechanisms, allowing other authenticated users to read information about applications, even though they have not been granted the necessary rights to do so. This issue affects Kiuwan SAST: <master.1808.p685.q13371

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-49112

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Constantin Schwarz
  • Johannes Greil

References

More from Kiuwan

View All →
CVE-2023-49113
Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer
Unknown 0
CVE-2023-49111
Reflected Cross-Site-Scripting in Kiuwan SAST
Unknown 0
CVE-2023-49110
XML External Entity Injection in Kiuwan SAST
Unknown 0

Affected Vendor

Affected Software

SAST
Vulnerable Versions:
<master.1808.p685.q13371

Timeline

Official Publish: June 20th, 2024
Last Modified: November 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.