I'm testing a website to find out vulnerabilities. Website is fully running on HTTPS only.
While testing, I came to know that the pdf files can be downloaded by authorized users only. This functionality is accessible after being logged-in into the application.
Suppose this is the path:
But when I'm changing the https request into http like below, I'm able to download the file directly without any restrictions.
So, according to OWASP Top 10 - 2013:
- What kind of vulnerability is this? Does it belong to "A4 – Insecure Direct Object References" or "A7 – Missing Function Level Access Control"?
- Does this vulnerability has any particular name?
- What would be the severity and impact?
Please explain it in-depth.