Securing a DoD Contractor: Finding a Multi-Tenant Authorization Vulnerability

A DoD contractor was found to have a multi-tenant authorization vulnerability by Strix, a startup backed by the Department of Defense. The vulnerability is described as a zero-auth vulnerability. The discovery was made public through an article on the Strix blog.