Insecure Direct Object Reference

Rundeck is vulnerable to insecure direct object reference. Due to lack of checking appropriate authorization level for API requests, a user can send a malicious API request to perform an unauthorized disclosure of execution data, logs and Job details at various threat level depending on the usage and configuration.