The vendor provides a patch which should be installed immediately. Specific fixed version information was not provided. Affected parties should contact the vendor to request the update.

Restrict access to the SafeController web application to authorized users and trusted network locations only. Review user accounts, roles, and branch assignments. Monitor requests to administrative and document-management endpoints for access by users that should not have the corresponding privileges. These measures should only be treated as interim risk reduction; the vendor-provided patch should be installed.