Elba.Code

Incorrectly configured access control security levels allow authenticated attackers with subscriber-level access and above to perform unauthorized actions. This occurs due to a missing capability check within a function.

Incorrectly configured access control security levels and a missing capability check on a function allow unauthenticated attackers to perform unauthorized actions.

Incorrectly configured access control security levels allow authenticated attackers with subscriber-level access and above to perform unauthorized actions. This occurs due to a missing capability check within a function.

This issue involves missing authorization that allows the exploitation of incorrectly configured access control security levels. It is caused by a missing capability check on a function, which enables unauthenticated attackers to perform unauthorized actions.