Introduction A vulnerability identified by Nils Putnins allows an attacker to access services without any authentication required. Vulnerability details The authorization controls within the application is incorrectly implemented. Requests towards endpoints contain no provided cookies or other authentication mechanisms, allowing the actions to be undertaken by a regular application visitor.