This vulnerability in themetechmount TrueBooker (<= 1.1.9) is classified as CWE-862: Missing Authorization. It allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized access to sensitive data and modification of information. The CVSS 3.1 base score is 9.1, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality and integrity impacts. The vendor has not provided a remediation level or patch information yet, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation can result in unauthorized disclosure and modification of sensitive data within TrueBooker, compromising confidentiality and integrity. There is no indication of availability impact. The vulnerability can be exploited remotely without authentication, increasing the risk severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected TrueBooker instances and monitor for unusual activity related to access control bypass attempts. Do not assume the vulnerability is mitigated without vendor confirmation.