PL or SQL : AUTHID unspecified

The application does not define AUTHID parameter when defining a function, procedure, or package. AUTHID defines the privileges, with which the function is called. Possible values of AUTHID are DEFINER (the rights of the user who defined the function) and CURRENT_USER. If the definer has broader rights than the current user, a privilege escalation can occur when invoking the function. In case of package or type the same applies to all procedures / function of the package and all methods of the type.

Functions and procedures are usually defined by the superuser SYS, which increases the impact of a possible attack.