Threats affecting pkg:github/simac/MyPHR

SIMAC MyPHR version 1.1 has an insecure direct object reference (IDOR) vulnerability that allows authenticated users to bypass authorization controls. This flaw enables attackers to access and modify arbitrary employee records by sending crafted requests with arbitrary employee identifiers and controlled password values. Sensitive personally identifiable information, including private pay bulletins, can be exposed or altered due to missing server-side ownership validation.