Kaleris Yard Management Solutions version 7.2.2.1 contains a role‑based access control flaw that allows authenticated users with only a shipping or receiving role to view truck dashboard resources. The CVE description confirms unauthorized access but does not explicitly state the confidentiality impact; it is inferred that viewing the dashboard could reveal sensitive operational information. The weakness matches CWE‑284 (Improper Access Control) and CWE‑639 (Privilege Escalation Through Role Manipulation).

Affected systems are Kaleris Yard Management Solutions, specifically version 7.2.2.1. No other vendors or product versions are listed as impacted.

The CVSS base score of 4.3 indicates low to moderate severity, and an EPSS score of less than 1% suggests a low likelihood of exploitation. The vulnerability is not in CISA’s KEV catalog. Because authentication is required, attackers must have valid credentials; thus the risk is confined to internal or compromised accounts. The exploitation path requires the attacker to have a shipping/receiving role, limiting the attack surface.