InSpire MMC user with "InSpire Index Writer" role is able to update Configuration (MINDBREEZE15601)
Affected Components: Mindbreeze InSpire G7, Mindbreeze InSpire SaaS
Severity: 6.2 Medium
First published: February 2, 2021
Privileged Role "InSpire Index Writer" is able to perform configuration posts that the index writer does not have access.
Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:
- Mindbreeze InSpire 20.5 Release (Version 126.96.36.1995)
- Mindbreeze InSpire SaaS 20.5 Release (Version 188.8.131.525)