This vulnerability in Apptivo Business Site CRM arises from missing authorization controls caused by misconfigured access control security levels. It affects versions up to 5.3 and allows unauthenticated attackers to perform actions that can cause denial of service or disrupt availability. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and an impact limited to availability. No vendor advisory or patch information is available at this time.

The impact is limited to availability disruption of the Apptivo Business Site CRM system. There is no reported impact on confidentiality or integrity. The vulnerability can be exploited remotely without authentication or user interaction, making it a significant risk for service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor Apptivo's official channels for updates. In the meantime, review access control configurations and restrict network exposure of the affected CRM system where possible to reduce risk.