This vulnerability in the Mobile Library Application from Yordam Information Technology allows an attacker with limited privileges to access sensitive embedded data due to missing authentication and authorization checks on critical functions. The issue affects versions before 5.0 and is identified as CWE-306 and CWE-862. The CVSS 4.0 base score is 8.5, indicating a high severity with network attack vector, low attack complexity, no user interaction required, and partial impact on confidentiality, integrity, and availability.

An attacker with limited privileges can retrieve sensitive embedded data without proper authentication or authorization, potentially leading to data exposure. The vulnerability impacts confidentiality, integrity, and availability to a limited extent but is significant due to the nature of the missing security controls on critical functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Mobile Library Application and monitor for unusual access patterns. Avoid deploying versions prior to 5.0 in sensitive environments.