How I found IDOR in NASA

Hello, everyone. In this write-up, I will explain how I found a simple IDOR bug.

Summary:

During my research, I discovered a security vulnerability known as an IDOR (Insecure Direct Object Reference) bug. This bug allows unauthorized users to access order information by manipulating order IDs within a system.

While investigating IDOR vulnerabilities, I found that it was possible to access the details of any order made by any user by changing the order ID. Exploiting this flaw could allow an attacker to circumvent access controls and obtain order information.

Impact:

I hope my write-up is helpful for you. If you notice any errors, please let me know so I can correct them. Thank you for reading.