This vulnerability in TNC Toolbox: Web Performance arises from missing authorization checks, enabling attackers with some privileges to perform unauthorized actions due to misconfigured access control levels. It affects all versions up to and including 2.0.4. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. No patch or vendor advisory details are currently provided.

The vulnerability allows an attacker with some level of privileges to bypass authorization controls, potentially leading to unauthorized modifications (integrity impact) within the affected product. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in TNC Toolbox: Web Performance to ensure proper authorization enforcement. Monitor vendor communications for updates on patches or official mitigations.