CVE-2006-5414

Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.