CVE-2012-2603

The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cret@cert.org

Published

2012-06-08

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Scrumworks (Collabnet)

References

• http://www.kb.cert.org/vuls/id/442595
• http://www.kb.cert.org/vuls/id/MAPG-8RJPJX