It was identified a security vulnerability against the API. No verification is being performed against the Authorization header except ensuring that it uses bearer authentication. For example, a malicious user can make a query against the API with a random string bearer token as shown below:

curl -vvvkL -H "Authorization: Bearer foobar" "https://<forklift_inventory_route_hostname>/providers"

Without a Authorization header and some form of Bearer token, a 401 is produced. However, the mere presence of a token value provides a 200 response with the requested information.