ZyWALL USG Appliance Access Bypass

ZyXEL ZyWALL USG appliances perform parts of the authorization for their management web interface on the client side using JavaScript. By setting the JavaScript variable « isAdmin » to « true », a user with limited access gets full access to the web interface.

Source: ZyWALL USG Appliance Access Bypass