OpenText Flipper Insufficient Access Control Vulnerability

A vulnerability allowing low privilege users to interact with the backend API without adequate permissions has been identified in OpenText Flipper version 3.1.2. This issue arises from insufficient granularity in access control, which can be exploited by users with limited rights to bypass security levels and access restricted functionalities.

Impact

Exploitation of this vulnerability could enable low privilege users to perform actions or access data through the backend API that should be restricted based on their user rights.