Description
VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
CERT/CC VINCE
Default version status: unaffected
* to < 3.0.9affected