An improper access check allows unauthorized users to access workflow stage and transition information.
CWE-284, NVD-CWE-noinfo