Versions up to and including 1.3.3 of SimpleCDR-X fail to set proper permissions on temporary files allowing any user on the system to view the files being recorded.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40111/SimpleCDR-X.txt
Source: https://packetstormsecurity.com/files/40111/SimpleCDR-X.txt.html