CVE-2019-18641

Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller...

CVE-2019-18641

Rock RMS prior to 1.8.6 contains a vulnerability in the People/GetVCard/REST controller where vCard access is mishandled, potentially allowing unauthorized access to vCard data. The issue is tied to the access control logic for vCard retrieval and is documented across multiple sources as CVE-2019...