This vulnerability in Ahmad Majestic Support arises from incorrectly configured access control security levels, enabling an attacker with some privileges to bypass authorization checks by controlling a key parameter. The affected versions include all releases from the initial version up to but not including 1.2.1. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges, no user interaction, and results in integrity loss without confidentiality or availability impact.

An attacker with limited privileges can exploit this vulnerability to bypass authorization controls, potentially leading to unauthorized actions or modifications within the application. There is no impact on confidentiality or availability according to the CVSS vector, but integrity can be compromised.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for unusual activity related to authorization controls.