Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5489

Опубликовано: 30 сент. 2014
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*
Версия до 4.2.2 (включая)
cpe:2.3:a:plone:plone:1.0:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:2.5.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.1.5:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.1.6:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:a1:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:a2:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:b1:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:b2:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:rc1:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2:rc2:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:plone:plone:4.3:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:zope:zope:*:*:*:*:*:*:*:*
Версия до 2.13.10 (включая)
cpe:2.3:a:zope:zope:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.6.4:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.3:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.4:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.5:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.6:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.7:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.7.8:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.8.4:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.8.6:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.8.8:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.2:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.3:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.4:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.5:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.6:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.9.7:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.10.3:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.10.8:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.11.0:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.11.1:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.11.2:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.11.3:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.0:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.1:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.2:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.3:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.4:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.5:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.6:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.7:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.8:*:*:*:*:*:*:*
cpe:2.3:a:zope:zope:2.13.9:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01924
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

redhat логотип

CVE-2012-5489

redhat
почти 14 лет назад

The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.

debian логотип

CVE-2012-5489

debian
почти 12 лет назад

The App.Undo.UndoSupport.get_request_var_or_attr function in Zope befo ...

github логотип

GHSA-879r-7f3w-8jj3

CVSS3: 6.5
github
около 8 лет назад

Plone and Zope2 vulnerable to unauthorized access to restricted attributes

EPSS

Процентиль: 78%
0.01924
Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264