A critical authorization bypass vulnerability in AlertEnterprise Guardian allows unauthorized users to escalate privileges by manipulating access request API calls.

The flaw resides in the Request Building Access functionality, specifically within the requestSubmit API call, which fails to properly validate the user ID parameter. This allows an unauthenticated attacker to bypass mandatory manager approval workflows.

The ability to bypass security approval workflows poses a significant risk to facility and data center integrity. An attacker can grant themselves unauthorized physical or logical access, leading to potential data compromise or physical security breaches. With a CVSS score of 7.3, this high-severity flaw represents a major failure in access control policies that could be exploited to bypass corporate security governance.

Immediate Action: Update AlertEnterprise Guardian to a supported build version equal to or greater than 4.1.12.2.1.19, 4.1.12.5.2.36, 4.1.13.0.60, 4.1.13.2.0.3.39, 4.1.13.2.0.3.41, 4.1.13.2.42, 4.1.13.2.25.44, 4.1.14.0.13, 4.1.14.0.43, 4.1.14.0.48, or 4.1.14.1.5.32.

Proactive Monitoring: Audit access request logs for suspicious API calls where the user ID parameter has been modified or does not match the authenticated session context.

Compensating Controls: Implement strict Web Application Firewall (WAF) rules to inspect and filter the requestSubmit API endpoint parameters to ensure that user identity fields remain immutable during the request process.

Public Exploit Available: Unknown

Given the potential for unauthorized privilege escalation and the bypass of critical security controls, organizations utilizing AlertEnterprise Guardian should prioritize the deployment of the vendor-supplied patches. Administrators must verify their current build number and apply the corresponding update immediately to close this authorization gap and prevent potential exploitation.