This vulnerability in AA Web Servant 12 Step Meeting List (versions up to 3.16.5) is due to missing authorization controls, allowing potentially unauthorized users to perform actions that should be restricted. The issue stems from incorrectly configured access control security levels. The CVSS 3.1 base score is 6.5 (medium severity), with network attack vector, low attack complexity, requiring low privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. No patch or official remediation information is provided.

The vulnerability can lead to denial of service or disruption of availability of the affected application due to missing authorization controls. Confidentiality and integrity are not impacted according to the CVSS vector. There are no known exploits in the wild, and no vendor advisory or patch information is currently available.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.