A critical authorization bypass vulnerability in Ghostwriter allows authenticated attackers to manipulate report templates, posing a significant risk to data integrity and reporting confidentiality.

This vulnerability, categorized as CWE-639, stems from an authorization bypass flaw where a user-controlled key is not correctly validated. An authenticated attacker can exploit this to access or swap report templates that should be restricted to other users or clients.

The ability for an unauthorized user to access or modify sensitive report templates can lead to significant data leakage, loss of client trust, and the compromise of professional reporting integrity. Given the CVSS score of 7.1, this represents a high risk to business operations, particularly for organizations handling sensitive engagement data.

Immediate Action: Update the Ghostwriter instance to version 7.1.2 or later to apply the necessary authorization checks.

Proactive Monitoring: Review application access logs for unusual patterns of template access or unexpected modifications to report configurations by standard user accounts.

Compensating Controls: Implement strict network access controls and ensure the Principle of Least Privilege is enforced for all user accounts accessing the reporting module.

Public Exploit Available: Unknown

The severity of this authorization bypass necessitates immediate attention from administrators. Organizations should prioritize patching to version 7.1.2 to eliminate the risk of report template manipulation and ensure the confidentiality of sensitive engagement data.