carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).