This vulnerability in 6Storage Rentals arises from missing authorization checks due to incorrectly configured access control security levels. It affects versions up to 2.20.2 and allows an attacker with some privileges to perform unauthorized actions that can impact the integrity and availability of the system. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are present.

The vulnerability can lead to unauthorized modification or disruption of system functions (integrity and availability impacts). There is no confidentiality impact reported. The medium CVSS score reflects moderate risk due to the potential for integrity and availability compromise by an attacker with limited privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided at this time. Organizations using affected versions should monitor vendor communications for updates and consider restricting access privileges as a precaution.