A missing authorization vulnerability exists in myCred up to version 4.0.2, allowing exploitation of incorrectly configured access control security levels. This flaw could permit unauthorized users with limited privileges to perform actions they should not be allowed to. The vulnerability has a medium severity rating with a CVSS score of 4.3, indicating limited impact primarily on integrity without affecting confidentiality or availability.