Description
The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client.
References
- VU#442595 third-party-advisory
- http://www.kb.cert.org/vuls/id/MAPG-8RJPJX