CVE-2008-3503

Plain Black WebGUI prior to 7.5.13 has an RSSFromParent flaw that does not restrict CS RSS feed view access, enabling remote disclosure of Collaboration System data. A fix is available in 7.5.13 (beta released) and later versions; upgrade to mitigate. Technical details: affected product/component...