medium5.7
CVE-2025-12063
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions.
Impact
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | Camera Station Pro | before 6.14.10768 |