[MEDIUM] SS-2016-012: Missing ACL on reports

PKSA-hk5w-y52r-kkfj GHSA-5f5v-5c3v-gw5v

Affected package: silverstripe/framework

Affected version: >=3.1.19,<3.1.20|>=3.2.4,<3.2.5|>=3.3.2,<3.3.3|>=3.4.0,<3.4.1

Reported by:
GitHub, FriendsOfPHP/security-advisories