Lucene search

K
githubGitHub Advisory DatabaseGHSA-WCWP-R3FJ-MM3P
HistoryApr 30, 2022 - 6:12 p.m.

Zope DTML implementation Improper Authentication

2022-04-3018:12:54
CWE-287
GitHub Advisory Database
github.com
1

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.3%

The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.

CPENameOperatorVersion
zopele2.2.4

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.3%

Related for GHSA-WCWP-R3FJ-MM3P