Admin roles stored in writable local database fields enable privilege escalation

Systems where the affected product stores role and module permissions in a local database; the sources do not name the product or versions. Exposure requires that an attacker already has write access to that database, so systems without such access are less at risk. The sources do not say which configurations are affected.