This vulnerability in AnyTrack Affiliate Link Manager (<= 1.0.4) involves missing authorization checks, allowing attackers to bypass access control mechanisms. The issue arises from incorrect configuration of security levels, enabling unauthorized users to perform actions that should require proper permissions. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or availability impact, but high integrity impact.

Exploitation of this vulnerability can lead to unauthorized modification of affiliate link data, potentially disrupting affiliate marketing operations or causing data integrity issues. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the AnyTrack Affiliate Link Manager interface to trusted users only and monitor for unauthorized changes. Avoid exposing the management interface to untrusted networks.