Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users.