This vulnerability involves a missing authorization control in UnitechPay, a product by Unitech Web. The flaw is due to incorrectly configured access control security levels in the unitechpay-paiements-mobile-money module, potentially allowing unauthorized users to perform actions they should not be permitted to. The affected versions include all versions up to 1.0.2. No CVSS score or detailed technical exploit information is provided, and no official remediation or patch has been published yet.

The impact is that unauthorized users may be able to bypass access controls and perform restricted operations within the UnitechPay application. The exact consequences depend on the specific functionality exposed by the unitechpay-paiements-mobile-money component but could include unauthorized financial transactions or data access. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible and monitor for any unusual activity related to UnitechPay. No vendor advisory or patch links are currently available.