Design/Logic Flaw

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...