This vulnerability (CVE-2024-33909) in Avirtum iPages Flipbook is classified as CWE-862 (Missing Authorization). It allows an attacker to bypass access control mechanisms due to incorrectly configured security levels. The affected product versions include all versions up to 1.5.1. The CVSS 3.1 base score is 5.3, with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No integrity or availability impact is reported. No vendor advisory or patch information is currently available, and the product is not a cloud service.

An attacker can exploit this vulnerability to gain unauthorized access to resources or functionality within Avirtum iPages Flipbook due to missing or misconfigured authorization controls. The impact is limited to confidentiality loss without affecting integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations in their deployment of iPages Flipbook to mitigate potential unauthorized access.