OpenLearnX versions before 2.0.4 contain an authentication vulnerability classified under CWE-287 (Improper Authentication) and CWE-347. This flaw could permit unauthorized users to gain access to accounts without proper credentials under certain conditions. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on integrity. The vulnerability is resolved in OpenLearnX version 2.0.4.

Successful exploitation could allow an attacker to bypass authentication controls and access user accounts without authorization. This could lead to unauthorized data access or actions performed under another user's identity. However, the impact is limited to integrity and does not affect confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Upgrade OpenLearnX to version 2.0.4 or later, where this authentication vulnerability is fixed. Since no official patch or temporary fix is separately provided, updating to the fixed version is the recommended remediation. Monitor vendor advisories for any further updates or guidance.