Environment
Novell Vibe 4.0.1
Novell Vibe 4.0.0
Novell Vibe 4.0.0
Situation
Users and Groups in Vibe that have been restricted to only see members of groups that they are in are allowed to view the email address of other users in the system. This issue can be seen when:
1. When clicking on an author's name in the Web UI to look at author's mini business card
2. Inspecting the cc list of an email notification sent to a group of all users
1. When clicking on an author's name in the Web UI to look at author's mini business card
2. Inspecting the cc list of an email notification sent to a group of all users
Resolution
A patch is available to correct this problem for Novell Vibe 4.0.1.
Please contact Micro Focus customer care with reference to this TID and
request the patch for your site.