Unauthorized access to web administration in BackOffice

Any local user including web Guests can perform some administration tasks...