CVE-2000-0725

EPSS 0.06%
Veröffentlicht 20.10.2000 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Zope ≫ Zope Version1.10.3

Zope ≫ Zope Version2.1.1

Zope ≫ Zope Version2.1.7

Zope ≫ Zope Version2.2_beta1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.141

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2000-08/0198.html

Patch

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2000-08/0259.html

Patch

http://www.debian.org/security/2000/20000821

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2000-052.html

http://www.securityfocus.com/bid/1577

Patch

Vendor Advisory

http://www.zope.org/Products/Zope/Hotfix_08_09_2000/security_alert

https://nvd.nist.gov/vuln/detail/CVE-2000-0725

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2000-0725

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2000-0725

EUVD