IDOR is one of the broken access control security flaws that occur with insecure references to data objects. So, they have similar nature but are not completely the same.