Lucene search

K
cve[email protected]CVE-2011-1950
HistoryJun 06, 2011 - 7:55 p.m.

CVE-2011-1950

2011-06-0619:55:02
CWE-264
web.nvd.nist.gov
50
cve-2011-1950
plone.app.users
remote authenticated users
account properties
unspecified vectors

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.

Affected configurations

NVD
Node
ploneploneMatch4.0
OR
ploneploneMatch4.1
CPENameOperatorVersion
plone:ploneploneeq4.0
plone:ploneploneeq4.1

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%