A critical authorization bypass vulnerability in OPEXUS eComplaint allows unauthenticated attackers to exfiltrate arbitrary files, posing a significant risk to data confidentiality.

The application utilizes predictable charge numbers within the DocumentOpen.aspx endpoint, allowing an unauthenticated attacker to bypass authorization controls and access files to which they should not have access.

Successful exploitation allows unauthorized third parties to download sensitive documents stored within the eComplaint system. Given the CVSS score of 7.5, this high-severity flaw could lead to significant data breaches, potential regulatory non-compliance, and loss of organizational trust regarding sensitive information security.

Immediate Action: Update OPEXUS eComplaint to version 9.0.45.0 or later to implement the required access control logic.

Proactive Monitoring: Inspect web server access logs for anomalous patterns of requests to DocumentOpen.aspx, specifically looking for sequential or brute-forced charge number parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to restrict access to the DocumentOpen.aspx endpoint and monitor for high-frequency requests from single IP addresses.

Public Exploit Available: Unknown.

The ability for an unauthenticated user to iterate through and download arbitrary documents represents a severe failure in access control. Administrators must prioritize patching this vulnerability immediately to prevent unauthorized data exfiltration. If patching is not immediately feasible, restrict network access to the vulnerable endpoint as a temporary defensive measure.