OpenAsset Digital Asset Management was found to provide several endpoints which allowed for unauthenticated data retrieval in a CSV format. Vulnerable versions include 12.0.19 (Cloud) and 11.2.1 (On-premise).
a0acbb09078931bf9f089e891b334d18ce2ebf45b68c44d5c001bc986f5e04b9