This vulnerability involves missing authorization in the Ays Pro Secure Copy Content Protection and Content Locking product, allowing attackers with limited privileges to bypass access control restrictions and perform unauthorized modifications. It affects all versions up to and including 5.0.0. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges, no user interaction, and impacting integrity only. No vendor advisory or patch information is provided, and the product is not a cloud service.

The vulnerability impacts the integrity of the protected content by allowing unauthorized modification due to missing authorization checks. Confidentiality and availability are not affected. There are no known exploits in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations to ensure proper authorization enforcement. Monitor vendor channels for updates or patches addressing this issue.