This vulnerability involves missing authorization controls in the Precious Metals Automated Product Pricing – Pro software by nfusionsolutions. Specifically, the product versions up to 4.0.5 have incorrectly configured access control security levels, which could allow unauthorized users to perform actions that should be restricted. The vulnerability is publicly disclosed but lacks detailed technical data, CVSS scoring, or vendor-provided remediation guidance.

The impact is unauthorized access or actions within the affected product due to missing or misconfigured authorization controls. Without proper access control, attackers could potentially manipulate pricing or other sensitive functions within the Precious Metals Automated Product Pricing – Pro software. However, no known exploits have been reported, and the extent of impact depends on the deployment context and usage of the product.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or workaround is available, review and tighten access control configurations where possible to limit exposure. Monitor vendor communications for updates regarding patches or official mitigations.