This vulnerability, identified as CWE-862 (Missing Authorization), affects solutioned Staff Training software versions <=1.0.7. It allows unauthenticated users to bypass access control mechanisms, potentially enabling unauthorized access to restricted functionality or data. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

An attacker without authentication can exploit this vulnerability to bypass access controls, potentially gaining unauthorized access to sensitive information or functionality within the Staff Training application. This can lead to partial loss of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected application and monitoring for suspicious activity related to unauthorized access attempts.