Privilege Escalation via Unauthorized API Access in HikCentral Access Control

There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.