A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization