In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.