CVE-2012-2603

CVE-2012-2603 describes a privilege escalation and information disclosure vulnerability in CollabNet ScrumWorks Pro versions prior to 6.0. Authenticated remote attackers can exploit this by manipulating a desktop client to gain elevated privileges and access sensitive data. With a CVSS score of 6.5, this vulnerability is of medium severity, requiring network access and user authentication but having low attack complexity, leading to partial impacts on confidentiality, integrity, and availability. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.