VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 22, 2024· Updated Jun 17, 2026

CVE-2024-5166

CVE-2024-5166

Description

An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Google/Looker15 versions
    cpe:2.3:a:google:looker:23.18:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:google:looker:23.18:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:23.20:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.10:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.12:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.14:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.16:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.18:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.20:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:looker:24.8:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 23.18

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.