Mavenir SCE Application Provisioning Portal Authorization Bypass Vulnerability Allowing Unauthorized Administrative Actions

A vulnerability allowing authorization bypass has been identified in the Mavenir SCE Application Provisioning Portal, specifically in version PORTAL-LBS-R_1_0_24_0. This vulnerability enables an authenticated 'guest' user to circumvent client-side access controls and execute unauthorized administrative tasks, such as using the 'add user' feature.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative actions being performed by 'guest' users, potentially allowing them to manipulate user accounts or access sensitive administrative features.