An Insecure Direct Object Reference (IDOR) vulnerability exists in the /tenants/{id} API endpoint of Inforcer Platform version 2.0.153. This flaw allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients by modifying the tenant ID in the request URL.