Authorization Bypass in Ryot via Access Link ID Manipulation

Executive Summary

Ryot before version 10.5.6 has an authorization bypass flaw. Authenticated users can revoke access links of other users by providing any accessLinkId. Attackers can exploit this by obtaining access link IDs from public share URLs and revoking them without verifying ownership, disrupting shared access for all users.

Useful 0 Not Useful 0

Impact Analysis

If you use Ryot's sharing features, an attacker could revoke your access to shared content by exploiting this flaw. This could prevent you from viewing or using shared files, even if you had legitimate access.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance by potentially exposing unauthorized access revocations, which may violate data integrity and availability requirements in GDPR and HIPAA. Unauthorized revocations could lead to unauthorized data access or loss of access for authorized users.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Ryot to version 10.5.6 or later to address the authorization bypass vulnerability. Review shared access links and revoke any suspicious or unauthorized access. Monitor for unusual activity in user access management.

Useful 0 Not Useful 0