FreeBSD : plone -- user can masquerade as a group (f4ff7434-9505-11db-9ddc-0011098b2f36)
Medium Nessus Plugin ID 23954
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionPlone.org reports :
PlonePAS-using Plone releases (Plone 2.5 and Plone 2.5.1) has a potential vulnerability that allows a user to masquerade as a group.
Please update your sites.
SolutionUpdate the affected package.