Affected: Genians, Inc Genian NAC 5.0.75 LTS Release, Genians, Inc Genian NAC 5.0.85 Release Stable, Genians, Inc Genian NAC 5.0.86 Release, Genians, Inc Genian ZTNA 6.0.35 LTS Release, Genians, Inc Genian ZTNA 6.0.45 Release Stable, Genians, Inc Genian ZTNA 6.0.46 Release

Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal functions