pentester.land· Feb 7, 2022· by Aditya Singh / rook1337 (@imrook1337)What I Found on Sony Vulnerability Disclosure ProgramOpen Original Article ↗📋 Copy Report☆ Save BookmarkTarget Program: Sony🎯 Vulnerability: Insecure Direct Object Reference (IDOR)💡 Defense Fix: Enforce object-level access control checks (ABAC/RBAC) on the server side for every API request.#Information disclosure#Lack of rate limiting#Open redirect#IDOR#XSS