Users who can only see members of group they are in can see other user's email address

  • 7017739
  • 17-Jun-2016
  • 17-Jun-2016


Novell Vibe 4.0.1
Novell Vibe 4.0.0


Users and Groups in Vibe that have been restricted to only see members of groups that they are in are allowed to view the email address of other users in the system. This issue can be seen when:

1. When clicking on an author's name in the Web UI to look at author's mini business card
2. Inspecting the cc list of an email notification sent to a group of all users


A patch is available to correct this problem for Novell Vibe 4.0.1. Please contact Micro Focus customer care with reference to this TID and request the patch for your site.