Lucene search

[email protected]CVE-2016-4042

HistoryFeb 24, 2017 - 8:59 p.m.

CVE-2016-4042

2017-02-2420:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2016-4042

plone

remote attackers

information disclosure

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.

Affected configurations

NVD

Node

ploneploneMatch3.3

ploneploneMatch3.3.1

ploneploneMatch3.3.2

ploneploneMatch3.3.3

ploneploneMatch3.3.4

ploneploneMatch3.3.5

ploneploneMatch3.3.6

ploneploneMatch4.0

ploneploneMatch4.0.1

ploneploneMatch4.0.2

ploneploneMatch4.0.3

ploneploneMatch4.0.4

ploneploneMatch4.0.5

ploneploneMatch4.0.7

ploneploneMatch4.0.8

ploneploneMatch4.0.9

ploneploneMatch4.0.10

ploneploneMatch4.1

ploneploneMatch4.1.1

ploneploneMatch4.1.2

ploneploneMatch4.1.3

ploneploneMatch4.1.4

ploneploneMatch4.1.5

ploneploneMatch4.1.6

ploneploneMatch4.2

ploneploneMatch4.2.1

ploneploneMatch4.2.2

ploneploneMatch4.2.3

ploneploneMatch4.2.4

ploneploneMatch4.2.5

ploneploneMatch4.2.6

ploneploneMatch4.2.7

ploneploneMatch4.3

ploneploneMatch4.3.1

ploneploneMatch4.3.2

ploneploneMatch4.3.3

ploneploneMatch4.3.4

ploneploneMatch4.3.5

ploneploneMatch4.3.6

ploneploneMatch4.3.7

ploneploneMatch4.3.8

ploneploneMatch4.3.9

ploneploneMatch5.0

ploneploneMatch5.0a1

ploneploneMatch5.0rc1

ploneploneMatch5.0rc2

ploneploneMatch5.0rc3

ploneploneMatch5.0.1

ploneploneMatch5.0.2

ploneploneMatch5.0.3

ploneploneMatch5.0.4

CPENameOperatorVersion
plone:ploneploneeq3.3
plone:ploneploneeq3.3.1
plone:ploneploneeq3.3.2
plone:ploneploneeq3.3.3
plone:ploneploneeq3.3.4
plone:ploneploneeq3.3.5
plone:ploneploneeq3.3.6
plone:ploneploneeq4.0
plone:ploneploneeq4.0.1
plone:ploneploneeq4.0.2

CPE	Name	Operator	Version
plone:plone	plone	eq	3.3
plone:plone	plone	eq	3.3.1
plone:plone	plone	eq	3.3.2
plone:plone	plone	eq	3.3.3
plone:plone	plone	eq	3.3.4
plone:plone	plone	eq	3.3.5
plone:plone	plone	eq	3.3.6
plone:plone	plone	eq	4.0
plone:plone	plone	eq	4.0.1
plone:plone	plone	eq	4.0.2

Rows per page:

1-10 of 471

References

www.openwall.com/lists/oss-security/2016/04/20/2

plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

Related for CVE-2016-4042

osv2 nvd1 github1 prion1 cvelist1 openvas1