LocalTapiola disclosed on HackerOne: User able to access company...

##Issue The reporter found a way to circumvent the privilege system for the admin-user for a company account. Once circumvented, a user could gain access to critical information in the company account, including user data. The finding requires the use of TUPAS-authentication as an entry point whic…