Jeff Cardwell

The issue is related to an Incorrect Authorization vulnerability in Drupal core, allowing Forceful Browsing.