CVE-2012-2603 - Wintriest Field
Description
The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via a modified desktop client.
Reference
http://www.kb.cert.org/vuls/id/MAPG-8RJPJX http://www.kb.cert.org/vuls/id/442595