CVE-2019-18641by Jeremyin Security Bulletinson Posted on March 23, 2020 Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.