5.5

CVE-2011-1950

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Plone ≫ Plone Version4.0
Plone ≫ Plone Version4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.58% 0.723
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 8 4.9
AV:N/AC:L/Au:S/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/44775
Vendor Advisory
http://securityreason.com/securityalert/8269
http://www.securityfocus.com/archive/1/518155/100/0/threaded
http://www.securityfocus.com/bid/48005
http://osvdb.org/72729
http://plone.org/products/plone/security/advisories/CVE-2011-1950
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67695