Discovered by Jake Cleland on behalf of The Missing Link Security
MicroRealEstate used a deterministic pattern to generate random identifiers for organisations registered to the platform. This greatly reduced the entropy of the identifiers, allowing adversaries to brute-force these IDs to retrieve documents uploaded by any landlord or tenant on the platform.
Fixed Versions:
N/A
The Missing Link acknowledges the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging. We celebrate the stories, culture and traditions of Aboriginal and Torres Strait Islanders of all communities who also work and live on this land.