Sensitive-data disclosure to local low-privileged users

Missing authorization in Gmission Web Fax 3.0 before 3.0.1 allows local users to read sensitive fax data through authentication abuse. Gmission has not published the affected request, function, or authorization check, so the precise operation that exposes the data is undisclosed. A low-privilege local account is required; the published impact is limited to confidentiality, with no reported data modification or service interruption.