Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
Published March 21, 2020.
Sparkdevnetwork Rock Rms