Mayank Somani

The issue allows an authenticated user with CA level access to change their `ca-id` to another user's, potentially enabling them to read sensitive information.

The issue allows a user with lower privilege capabilities to adopt the capabilities of a higher-privilege user. This is achieved by intercepting the higher-privilege user's cookie value from its HTTP request and then reusing it in subsequent requests.