A missing authorization vulnerability in the Drupal OAuth2 Token Manager component allows forceful browsing. This affects versions from 0.0.0 up to 1.2.0. The flaw could enable unauthorized access to resources due to lack of proper authorization checks.