Unable to find details of CVE-2014-3627 fix.

[Nijel s f]

Hi,

>From the 2.5.2 release mail I understood that the following security 
>vulnerability is fixed
        (2) CVE-2014-3627: a distributed-cache vulnerability (more details 
below).

But I am unable to find any JIRA/check-in corresponding to this issue.

Can I get some details about this change ?

Regards
Nijel