EIP-2026-101315

This writeup describes an improper access control vulnerability in ICT Protege GX/WX, allowing authenticated operators to disclose SHA1 password hashes of other users. The vulnerability is client-side and requires navigation to a specific URL to observe the exposed hash.