IDOR

As an authenticated user, it would be possible to access personal information (Name and Address) of all householders registered on a online billing scheme.