This vulnerability (CWE-862) in webbernaut Cloak Front End Email arises from missing authorization checks, enabling unauthorized users to bypass access control restrictions. The affected product versions up to 1.9.5 lack proper enforcement of security levels, potentially allowing attackers to perform unauthorized actions that compromise data integrity. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to integrity.

The vulnerability allows attackers to bypass authorization controls, leading to unauthorized modification or manipulation of data within the Cloak Front End Email application. There is no impact on confidentiality or availability reported. The integrity impact is high, meaning attackers can alter data or system state without proper authorization.

No official patch or remediation level has been provided by the vendor as of the published date. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should review and tighten access control configurations where possible and monitor for unusual activity related to authorization bypass attempts.