CVE-2011-4030

Description

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-0027

http://www.securityfocus.com/bid/50287

http://secunia.com/advisories/46323

http://pypi.python.org/pypi/Products.PloneHotfix20110928/1.0

http://plone.org/products/plone-hotfix/releases/20110928/PloneHotfix20110928-1.0.zip

http://plone.org/products/plone-hotfix/releases/20110928

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS