This vulnerability (CWE-639) in NextGeography NG Analyser allows an attacker with limited privileges to bypass authorization controls by manipulating a user-controlled key. This flaw permits functionality misuse, potentially exposing sensitive information. The issue affects versions prior to 2.2.711. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No official remediation or patch has been documented yet.

An attacker with some level of privileges can bypass authorization mechanisms to access or misuse functionality that should be restricted. This leads to a high confidentiality impact, potentially exposing sensitive data. There is no impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to NG Analyser to trusted users only and monitor for unusual activity related to authorization. Avoid granting unnecessary privileges that could be leveraged to exploit this vulnerability.