This vulnerability in Checkout Gateway for IRIS involves missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. The affected versions include all releases up to and including 1.3. The CVSS vector indicates the vulnerability is remotely exploitable without privileges or user interaction, with no confidentiality impact but with integrity and availability impacts. No patch or remediation details are provided, and the product is not a cloud service.

Exploitation could allow an attacker to perform unauthorized actions that compromise the integrity and availability of the affected system. There is no confidentiality impact reported. The medium severity score reflects the potential for disruption or modification of system operations without requiring authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. In the meantime, review and tighten access control configurations where possible to reduce exposure.