8.5

CVE-2012-5487

The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Plone ≫ Plone Version <= 4.2.2
Plone ≫ Plone Version 1.0
Plone ≫ Plone Version 1.0.1
Plone ≫ Plone Version 1.0.2
Plone ≫ Plone Version 1.0.3
Plone ≫ Plone Version 1.0.4
Plone ≫ Plone Version 1.0.5
Plone ≫ Plone Version 1.0.6
Plone ≫ Plone Version 2.0
Plone ≫ Plone Version 2.0.1
Plone ≫ Plone Version 2.0.2
Plone ≫ Plone Version 2.0.3
Plone ≫ Plone Version 2.0.4
Plone ≫ Plone Version 2.0.5
Plone ≫ Plone Version 2.1
Plone ≫ Plone Version 2.1.1
Plone ≫ Plone Version 2.1.2
Plone ≫ Plone Version 2.1.3
Plone ≫ Plone Version 2.1.4
Plone ≫ Plone Version 2.5
Plone ≫ Plone Version 2.5.1
Plone ≫ Plone Version 2.5.2
Plone ≫ Plone Version 2.5.3
Plone ≫ Plone Version 2.5.4
Plone ≫ Plone Version 2.5.5
Plone ≫ Plone Version 3.0
Plone ≫ Plone Version 3.0.1
Plone ≫ Plone Version 3.0.2
Plone ≫ Plone Version 3.0.3
Plone ≫ Plone Version 3.0.4
Plone ≫ Plone Version 3.0.5
Plone ≫ Plone Version 3.0.6
Plone ≫ Plone Version 3.1
Plone ≫ Plone Version 3.1.1
Plone ≫ Plone Version 3.1.2
Plone ≫ Plone Version 3.1.3
Plone ≫ Plone Version 3.1.4
Plone ≫ Plone Version 3.1.5.1
Plone ≫ Plone Version 3.1.6
Plone ≫ Plone Version 3.1.7
Plone ≫ Plone Version 3.2
Plone ≫ Plone Version 3.2.1
Plone ≫ Plone Version 3.2.2
Plone ≫ Plone Version 3.2.3
Plone ≫ Plone Version 3.3
Plone ≫ Plone Version 3.3.1
Plone ≫ Plone Version 3.3.2
Plone ≫ Plone Version 3.3.3
Plone ≫ Plone Version 3.3.4
Plone ≫ Plone Version 3.3.5
Plone ≫ Plone Version 4.0
Plone ≫ Plone Version 4.0.1
Plone ≫ Plone Version 4.0.2
Plone ≫ Plone Version 4.0.3
Plone ≫ Plone Version 4.0.4
Plone ≫ Plone Version 4.0.5
Plone ≫ Plone Version 4.0.6.1
Plone ≫ Plone Version 4.1
Plone ≫ Plone Version 4.1.4
Plone ≫ Plone Version 4.1.5
Plone ≫ Plone Version 4.1.6
Plone ≫ Plone Version 4.2
Plone ≫ Plone Version 4.2 Update a1
Plone ≫ Plone Version 4.2 Update a2
Plone ≫ Plone Version 4.2 Update b1
Plone ≫ Plone Version 4.2 Update b2
Plone ≫ Plone Version 4.2 Update rc1
Plone ≫ Plone Version 4.2 Update rc2
Plone ≫ Plone Version 4.2.0.1
Plone ≫ Plone Version 4.2.1
Plone ≫ Plone Version 4.2.1.1
Plone ≫ Plone Version 4.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.751
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2012/11/10/1
https://github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
https://plone.org/products/plone-hotfix/releases/20121106
Patch
https://plone.org/products/plone/security/advisories/20121106/03
Vendor Advisory