5.8

CVE-2013-4191

zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Plone ≫ Plone Version4.3
Plone ≫ Plone Version4.3.1
Plone ≫ Plone Version4.2
Plone ≫ Plone Version4.2.1
Plone ≫ Plone Version4.2.2
Plone ≫ Plone Version4.2.3
Plone ≫ Plone Version4.2.4
Plone ≫ Plone Version4.2.5
Plone ≫ Plone Version2.1
Plone ≫ Plone Version2.1.1
Plone ≫ Plone Version2.1.2
Plone ≫ Plone Version2.1.3
Plone ≫ Plone Version2.1.4
Plone ≫ Plone Version2.5
Plone ≫ Plone Version2.5.1
Plone ≫ Plone Version2.5.2
Plone ≫ Plone Version2.5.3
Plone ≫ Plone Version2.5.4
Plone ≫ Plone Version2.5.5
Plone ≫ Plone Version3.0
Plone ≫ Plone Version3.0.1
Plone ≫ Plone Version3.0.2
Plone ≫ Plone Version3.0.3
Plone ≫ Plone Version3.0.4
Plone ≫ Plone Version3.0.5
Plone ≫ Plone Version3.0.6
Plone ≫ Plone Version3.1
Plone ≫ Plone Version3.1.1
Plone ≫ Plone Version3.1.2
Plone ≫ Plone Version3.1.3
Plone ≫ Plone Version3.1.4
Plone ≫ Plone Version3.1.5.1
Plone ≫ Plone Version3.1.6
Plone ≫ Plone Version3.1.7
Plone ≫ Plone Version3.2
Plone ≫ Plone Version3.2.1
Plone ≫ Plone Version3.2.2
Plone ≫ Plone Version3.2.3
Plone ≫ Plone Version3.3
Plone ≫ Plone Version3.3.1
Plone ≫ Plone Version3.3.2
Plone ≫ Plone Version3.3.3
Plone ≫ Plone Version3.3.4
Plone ≫ Plone Version3.3.5
Plone ≫ Plone Version4.0
Plone ≫ Plone Version4.0.1
Plone ≫ Plone Version4.0.2
Plone ≫ Plone Version4.0.3
Plone ≫ Plone Version4.0.4
Plone ≫ Plone Version4.0.5
Plone ≫ Plone Version4.0.6.1
Plone ≫ Plone Version4.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.19% 0.641
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://plone.org/products/plone-hotfix/releases/20130618
Patch
http://plone.org/products/plone/security/advisories/20130618-announcement
Vendor Advisory
http://seclists.org/oss-sec/2013/q3/261
https://bugzilla.redhat.com/show_bug.cgi?id=978453