An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.