Inova Partner 5.0.5-RELEASE, Build 0510-0906 and previous versions allows authenticated users authorization bypass via insecure direct object reference.
inova-software inova partner