CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Development and test API endpoints are present that mirror production functionality. |
A specific administrative endpoint is accessible without proper authentication, exposing device management functions. |
A specific administrative endpoint notifications is accessible without proper authentication. |
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. |
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. |