WEBCON

WEBCON BPS Updates Fix Vacation-Data Authorization Bypass

WEBCON BPS can expose other employees' vacation schedules through an authenticated API authorization flaw. Install the branch-appropriate fix and validate cross-team access with synthetic accounts; a login should not authorize every employee's schedule.