CVE-2011-3391

CVE-2011-3391 affects IBM Rational Build Forge 7.1.2. The flaw arises from relying on client-side JavaScript to enforce the EditSecurity permission for the Export Key File function. This allows remote authenticated users to read a key file by removing the disabled attribute in the Security submen...