LogStare Collector has an incorrect authorization vulnerability in its UserRegistration functionality. This flaw allows a non-administrative user to create new user accounts by sending specially crafted HTTP requests. The vulnerability has a medium severity rating with a CVSS score of 4.3. No affected versions or patch information are provided, and there are no known exploits in the wild at this time.