This vulnerability (CWE-862) in HAVELSAN Inc. Liman MYS arises from missing authorization controls, enabling an attacker with limited privileges to escalate their privileges. The affected versions include 2.2.3 and all versions prior to 2.3.1. The CVSS 3.1 score of 8.8 reflects network attack vector, low attack complexity, required privileges at low level, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an attacker with some privileges to escalate their privileges, potentially gaining unauthorized access to sensitive data or system functions. The impact includes complete compromise of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to Liman MYS instances to trusted users only and monitor for suspicious privilege escalation attempts.