Design/Logic Flaw

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other users...