A vulnerability in Industrial Application Software IAS Canias ERP 8.03 affects the iasGetServerInfoEvent function of the RMI Interface component, allowing improper authorization. The vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed, but the vendor has not responded or provided a fix. The CVSS score is 5.3, indicating a medium severity impact primarily on confidentiality.