Unauthorized access and modification of workflow tasks

• Type: Bug
• Status: Closed
• Resolution: Duplicate
• Affects Version/s: 7.0.1 CE GA2
• Fix Version/s: 7.0.2 CE GA3
• Component/s: Application Security > Permissions, Security Vulnerability, Workflow
• Labels:
  • QA-AUTOMATION
  • cst-patch
  • fw_test_unit

By constructing the correct URL, a user without the proper permissions can access and modify workflow tasks.