Описание
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.
Отчет
Not vulnerable. This issue did not affect the versions of luci (as provided by conga) as shipped with Red Hat Enterprise Linux 5.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | conga | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Low
https://bugzilla.redhat.com/show_bug.cgi?id=874214(Plone): Attempting to access a view with no name returned an internal data structure
EPSS
Процентиль: 55%
0.00319
Низкий
5 Medium
CVSS2
Связанные уязвимости
nvd
больше 11 лет назад
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name.
debian
больше 11 лет назад
atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote atta ...
EPSS
Процентиль: 55%
0.00319
Низкий
5 Medium
CVSS2