This vulnerability (CVE-2024-13175) in Vidco Software VOC TESTER involves an authorization bypass through a user-controlled key, classified under CWE-639. It enables forceful browsing, where an attacker with low privileges can access resources or data they should not be authorized to view. The issue affects versions before 12.41.0. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

An attacker with local access and low privileges can bypass authorization controls by manipulating user-controlled keys, leading to unauthorized disclosure of sensitive information. The confidentiality impact is high, but integrity and availability are not affected. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to the affected software to trusted users only and consider additional access controls to mitigate unauthorized browsing risks.