Lucene search
HistorySep 30, 2014 - 2:55 p.m.
CVE-2012-5489
cve-2012-5489
zope
plone
remote access
authenticated users
security vulnerability
6.6 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.4%
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.
Related
osv
osv
PYSEC-2014-31
2014-09-30 14:55:00
PYSEC-2014-74
2014-09-30 14:55:00
Moderate severity vulnerability that affects Plone and Zope2
2018-07-23 19:52:06
prion
prion
Design/Logic Flaw
2014-09-30 14:55:00
github
github
Moderate severity vulnerability that affects Plone and Zope2
2018-07-23 19:52:06
cvelist
cvelist
CVE-2012-5489
2014-09-30 14:00:00
6.6 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.4%
Related for CVE-2012-5489