CVE-2024-25922 describes a Missing Authorization (CWE-862) vulnerability in Peach Payments Gateway affecting versions through 3.1.9. This means the product fails to properly verify whether a user or process is authorized to perform certain actions, which could lead to unauthorized operations. The vulnerability has a CVSS 3.1 base score of 5.4, reflecting medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacts integrity and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions that impact the integrity and availability of the Peach Payments Gateway. There is no evidence of confidentiality impact. No known exploits have been reported, so the practical impact is currently theoretical but could affect transaction processing or system stability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to the affected versions and apply principle of least privilege to limit potential exploitation.