This vulnerability in WAH Forms involves missing authorization checks due to misconfigured access control security levels. It allows an attacker with low privileges to access or perform actions that should require higher authorization. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact is limited to confidentiality loss without integrity or availability impact. No official fix or patch has been published as of the current information.

The vulnerability allows unauthorized access to sensitive information within the WAH Forms application, potentially leading to confidentiality breaches. There is no indication of impact on data integrity or system availability. Exploitation requires low privileges but no user interaction, increasing the risk if an attacker has some level of access to the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in WAH Forms to ensure proper authorization enforcement. Limit user privileges to the minimum necessary and monitor for unusual access patterns related to form usage.