Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.

The version of Plone installed on the remote host is 2.5.5 prior to 4.3.16, 5.0.x prior to 5.0.10. It is, therefore, affected by the following vulnerabilities:

  - When you visit a page where you need to login, sends you to the login form with a 'came_from' parameter     set to the previous url. (CVE-2017-1000481)

  - A member of the Plone site could set javascript in the home_page property of his profile, and have this     executed when a visitor click the home page link on the author page. (CVE-2017-1000482)

  - Accessing private content via str.format in through-the-web templates and scripts in Plone.
    (CVE-2017-1000483)

  - By linking to a specific url in Plone with a parameter, an attacker could send you to his own website.
    (CVE-2017-1000484)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. Since a vendor hotfix (PloneHotfix20171128) may remediate this without a version upgrade, this plugin only reports when running in Paranoid mode.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1.
    This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the
    hotfix is only relevant for Plone 4 and 5. (CVE-2017-1000483)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1.
    This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the     hotfix is only relevant for Plone 4 and 5. (CVE-2017-1000483)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
329003	Plone 2.5.5 < 4.3.16 / 5.0.x < 5.0.10 Multiple Vulnerabilities (HF 20171128)	Nessus	Misc.	Local	medium
433711	SCA: security update for Plone (GHSA-qc57-h2f7-p4hx)	Tenable Cloud Security	SCA Checks	Local	high
433711	SCA: security update for Plone (GHSA-qc57-h2f7-p4hx)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
220140	Linux Distros Unpatched Vulnerability : CVE-2017-1000483	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2017-1000483

high

Tenable Plugins

medium

high

high

medium