IBM Process Mining versions 2.0.0 through 2.2.1 contain an improper access control vulnerability that could allow a remote attacker to obtain sensitive information. This vulnerability is classified as critical with a CVSS score of 9.3, indicating high confidentiality and integrity impact without requiring user interaction or privileges.