Therefore Corporation GmbH has identified an account impersonation vulnerability in Therefore™ Online and Therefore™ On-Premises. This flaw allows a malicious user to impersonate the web service account or an API service account when connecting to the Therefore™ Server. Successful impersonation grants access to documents stored within the Therefore™ system at the application level, not at the operating system level. The vulnerability has a high severity score of 8.8 (CVSS 4.0). No patch or remediation information is currently available.