A missing authorization check in Interprobe Information Technologies’ Qorela DC allows an attacker to abuse account privileges. The flaw enables an unauthorized user to perform actions that should be restricted to higher‑privileged accounts, potentially granting full control over the system. This weakness is classified as CWE-862, indicating that the software fails to verify proper access rights before allowing sensitive operations. The impact is thus loss of confidentiality, integrity, and availability for any user accounts that fall under the affected privilege model.

Vendor Interprobe Information Technologies Inc. product Qorela DC. Affected releases are 1.6.1‑RC29 and all versions prior to 1.6.2. Users running these versions should verify their deployment against the vulnerability.

The CVSS score of 8.8 marks this flaw as high severity. Exploit probability (EPSS) is not available, so the likelihood of exploitation at this time is uncertain; it is not listed in the CISA Known Exploited Vulnerabilities catalog, which suggests no documented exploitation yet. The attack vector is not explicitly disclosed in the advisory, but the identified weakness implies that an attacker either requires an authenticated session or a compromised account to leverage the missing authorization. If credential compromise is achieved, the attacker can elevate privileges within the Qorela DC environment.