Herowatch Go Server by About Time Technologies has an Insecure Direct Object Reference (IDOR) vulnerability allowing authenticated remote attackers to modify parameters to access or manipulate other users' data and functions. This vulnerability has a CVSS score of 7.5, indicating high severity. No affected versions or patches are specified in the available data.