CVE-2000-0725

EPSS 0.06%
Published 20.10.2000 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Zope ≫ Zope Version1.10.3

Zope ≫ Zope Version2.1.1

Zope ≫ Zope Version2.1.7

Zope ≫ Zope Version2.2_beta1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.141

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2000-08/0198.html

Patch

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2000-08/0259.html

Patch

http://www.debian.org/security/2000/20000821

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2000-052.html

http://www.securityfocus.com/bid/1577

Patch

Vendor Advisory

http://www.zope.org/Products/Zope/Hotfix_08_09_2000/security_alert

https://nvd.nist.gov/vuln/detail/CVE-2000-0725

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2000-0725

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2000-0725

EUVD