This vulnerability, identified as CWE-284 (Improper Access Control), affects the Portal Generator addon to Priority ERP. It enables an unauthenticated attacker to remotely access sensitive information, resulting in a total loss of confidentiality. The CVSS v3.1 base score is 8.6, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change with high confidentiality impact but no integrity or availability impact. There is no vendor advisory or patch information available at this time.

An attacker can remotely exploit this vulnerability without authentication or user interaction to gain unauthorized access to sensitive data, causing a complete confidentiality compromise. There is no impact on integrity or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected addon and monitor for suspicious activity related to unauthorized access attempts.