HCL Aftermarket DPC Missing Functional Level Access Control Vulnerability Allowing Privilege Escalation

A vulnerability in HCL Aftermarket DPC version 1.0.0 has been identified, characterized by missing functional level access control. This vulnerability allows attackers to escalate privileges, potentially compromising the application and enabling the theft and manipulation of data.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing attackers to gain elevated rights within the application. This could result in a broader compromise of the application’s integrity and confidentiality, with potential unauthorized access to or manipulation of sensitive data.

Remediation

This vulnerability has been remediated through backend development.