HCL Aftermarket DPC is affected by Missing Functional Level Access Control

HCL Aftermarket DPC lacks proper access controls at the functional level, allowing attackers to gain unauthorized privileges and access or modify sensitive data within the application.

Missing functional-level access control in HCL Aftermarket DPC enables privilege escalation attacks where authenticated or unauthenticated users can bypass authorization checks to access restricted features. The vulnerability permits unauthorized data exfiltration and modification, compromising data integrity and confidentiality.