The vulnerability identified as CVE-2024-38745 in Rymera Web Co Wholesale Suite involves missing authorization controls, specifically a failure to properly enforce ACLs on certain functionality. This allows unauthenticated or unauthorized users to access features or operations that should be restricted. The affected versions include all releases up to 2.1.12. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, limited confidentiality impact, and no integrity or availability impact. No patch or official remediation level has been published by the vendor or authoritative sources.

Unauthorized users may gain access to functionality that should be restricted, potentially exposing sensitive information or enabling actions not intended for them. The impact is limited to confidentiality with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, organizations should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected application or implementing compensating controls to limit unauthorized access where feasible.