National Australia Bank’s Security Assurance Team have identified a vulnerability in the Visual Sitecore Service, part of the Sitecore CMS application, that allows low privileged users to gain access to administrative and other credentials. Sitecore.NET version 5.3.1 revision 071114 is confirmed vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/75858/sitecore-disclose.txt
Source: https://packetstormsecurity.com/files/75858/Sitecore-Information-Disclosure-Privilege-Escalation.html