An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.