This vulnerability involves missing authorization checks in the Sertifier Certificate & Badge Maker product, affecting versions up to and including 1.21. Due to incorrect access control configurations, an attacker with low privileges may access sensitive certificate or badge-related functionality or data without proper authorization. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to confidentiality, with no integrity or availability impact reported.

The vulnerability allows unauthorized access to sensitive information within the affected product, potentially exposing confidential certificate or badge data. There is no reported impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, review and tighten access control configurations where possible to limit unauthorized access.