Any user could read the financial records of any customer
Any user could delete any customers accounts in the system
Any user could take over any account (including high-value accounts)
The organization was vulnerable to a denial-of-service condition that would render entire applications unavailable, and we were able to exploit this vulnerability
https://t.co/n7CAcO8Ovw