CVE-2011-4030

Опубликовано: 10 окт. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:plone:cmfeditions:2.0a1:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b1:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b2:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b3:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b4:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b5:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b6:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b7:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b8:*:*:*:*:*:*:*

cpe:2.3:a:plone:cmfeditions:2.0b9:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.8:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.0.9:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2a1:*:*:*:*:*:*:*

cpe:2.3:a:plone:plone:4.2a2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01098

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2011-4030

redhat

больше 14 лет назад

CVE-2011-4030

debian

больше 14 лет назад

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4 ...

GHSA-pwgm-jvqv-6v8p

github

больше 3 лет назад

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

EPSS

Процентиль: 78%

0.01098

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264