The vulnerability is an improper access control flaw that allows users to bypass security permissions when the system is misconfigured. It enables unauthorized users to gain access to restricted library data, potentially exposing sensitive information. The weakness is classified as CWE-863, indicating an authorization bypass. A CVSS score of 8.8 reflects this serious impact.

Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. offers the Library Automation System, and the vulnerability affects all releases from version 19.5 up to, but not including, version 22.1. No other versions are listed as impacted.

Because the CVSS score is high at 8.8 and EPSS data is not available, the risk remains significant, especially for organizations relying on the affected range of versions. The flaw is likely exploitable by attackers who can access the system through either compromised user credentials or by taking advantage of poorly configured role permissions; detailed attack vectors are not provided, but misconfigured access levels are the root cause. The vulnerability is not catalogued in the CISA KEV system, indicating no known widespread exploitation at this time, yet the high severity suggests a prudent response.