This vulnerability affects the doAction function of the RMI Interface component in IAS Canias ERP 8.03. Improper authentication arises from the ability to manipulate the sessionId argument, allowing an attacker to bypass authentication controls remotely. The CVSS 4.0 base score is 6.9 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality impact. The vendor has not provided any response or remediation guidance, and no official patch is currently available.

Successful exploitation allows an unauthenticated remote attacker to bypass authentication mechanisms in the affected ERP software. This could lead to unauthorized access to the system functions exposed via the RMI Interface. The confidentiality impact is limited, and there is no indication of integrity or availability impact from the provided data. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch or workaround is available, users should consider restricting network access to the affected RMI Interface and monitor for suspicious activity related to sessionId manipulation. Avoid exposing the vulnerable service to untrusted networks until a fix is released.