Description
Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.
References
- 22454 third-party-advisory
- brim-unspecified-information-disclosure(29650) vdb-entry
- http://sourceforge.net/forum/forum.php?forum_id=624172