This vulnerability in AnyTrack Affiliate Link Manager arises from missing authorization controls, enabling unauthorized users to perform actions that should require proper access rights. The affected versions include all versions up to and including 1.5.5. The CVSS score is 5.3 (medium severity) with an attack vector of network, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Exploitation of this vulnerability could allow unauthorized users to modify data or perform actions without proper authorization, impacting data integrity. There is no reported impact on confidentiality or availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the AnyTrack Affiliate Link Manager interface to trusted users only and monitor for unauthorized activity related to access control. Avoid exposing the management interface to untrusted networks.