description: Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission.
problem types: Authenticated Insecure Direct Object Reference
affected:
{
product: TCExam
vendor: n/a
versions:
status: affected, version: 14.2.2
}