CVE-2021-44838

CVE-2021-44838 is a medium-severity access control vulnerability affecting Delta RM 1.2, allowing authenticated users to view risk information belonging to other companies. This flaw, with a CVSS score of 4.3, stems from improper authorization checks on the /risque/risque/ajax-details endpoint, enabling unauthorized data exposure via a POST request with a manipulated 'id' parameter. While the attack vector is network-based and low complexity, the potential impact is limited to confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.