This vulnerability (CWE-862) in the Access Control System (GKS) by Armiya Information Technologies Ltd. Co. involves missing authorization controls that permit an unauthenticated attacker to collect data from common resource locations. It affects all versions prior to version 2. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges, and no user interaction, resulting in high confidentiality impact, low integrity impact, and no availability impact.

An attacker can remotely access and collect sensitive data from common resource locations without any authentication or user interaction, potentially leading to significant confidentiality breaches. Integrity and availability impacts are low or none according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor the vendor's communications for updates and apply patches once available.