WinPlus Authorization Bypass Vulnerability Allowing User Impersonation

A vulnerability in WinPlus version 24.11.27 by Informática del Este allows for improper authorization control, enabling one user to impersonate another by simply knowing their numerical ID. This flaw could lead to unauthorized access to another user's account, potentially compromising the confidentiality, integrity, and availability of the data within the application.

Impact

Exploitation of this vulnerability could result in unauthorized account access, allowing an attacker to manipulate data and access resources intended for the impersonated user.