This vulnerability, identified as CWE-306 (Missing Authentication for Critical Function), affects the Rush product by IKAS Technology Inc. It allows an attacker to bypass authentication controls on a critical function, enabling the attacker to fake the source of data. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, and no user interaction needed. The impact is limited to integrity loss without confidentiality or availability impact. No remediation level or patch information is currently available.

The vulnerability allows an attacker to impersonate or fake the source of data within the affected product, leading to potential data integrity issues. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigation steps are provided by the vendor at this time.