NetSight
IP …
medium6.5

CVE-2024-5166

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

Impact

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

Affected products

VendorProductAffected versions
GoogleLooker
Versions 23.18, 23.20, 24.0, 24.2, 24.4, 24.6

Weakness classification

CWE-639

References