An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects.
NVD-CWE-noinfo, CWE-284