Essity: Privilege-relevant fields are clientModify in SAP CDC schema allowing role escalation to Admin

A vulnerability was discovered in the Gigya/SAP CDC tenant that allowed authenticated users to escalate their privileges to the Admin role. This was possible because critical fields such as "data.role" and "data.org.roles.name" had "writeAccess":"clientModify" permissions, allowing users to modif...