Detections
Analytics
CVE-2011-1950
high
Description
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/67695
http://www.securityfocus.com/bid/48005
http://www.securityfocus.com/archive/1/518155/100/0/threaded
http://securityreason.com/securityalert/8269
http://secunia.com/advisories/44775
http://plone.org/products/plone/security/advisories/CVE-2011-1950
Details
Published: 2011-06-06
Updated: 2026-06-16
Risk Information
CVSS v2
Base Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P
Severity: Medium
CVSS v3
Base Score: 6.5
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Severity: Medium
CVSS v4
Base Score: 7.1
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Severity: High
EPSS
EPSS: 0.0077