This vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro (versions up to 4.0.5) involves missing authorization controls, which means that the product does not properly enforce access control security levels. As a result, unauthorized users may perform actions that should be restricted, impacting the integrity of the system. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official remediation level has been provided by the vendor, and no exploits are currently known in the wild.

The vulnerability allows unauthorized users to perform actions that could alter data or system state, affecting the integrity of the Precious Metals Automated Product Pricing – Pro system. There is no impact on confidentiality or availability according to the CVSS vector. Since no known exploits exist in the wild, the immediate risk is limited but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or mitigations. No official remediation level has been provided by the vendor at this time.