The Caldera SMTP Mailer component developed by David Cramer contains a missing authorization vulnerability in versions up to and including 1.0.1. This issue permits users with limited privileges to bypass authorization controls, resulting in unauthorized information modification. The vulnerability is network exploitable with low attack complexity and does not require user interaction. Confidentiality and availability impacts are not present, but integrity is affected. No patch or official remediation guidance has been provided as of the publication date.

An attacker with limited privileges can exploit this vulnerability to modify information without proper authorization. There is no impact on confidentiality or availability. The medium severity score reflects the integrity impact and ease of network exploitation without user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Caldera SMTP Mailer to trusted users only and monitor for unusual activity related to mailer operations.