A specific administrative endpoint notifications is accessible without proper authentication.
CWE-306