Plone Products.PlonePAS < 3.2.2 / 3.3.x < 3.9 Insecure Session Management

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(329030);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/22");

  script_cve_id("CVE-2009-0662");

  script_name(english:"Plone Products.PlonePAS < 3.2.2 / 3.3.x < 3.9 Insecure Session Management");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by an insecure session management vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Products.PlonePAS installed on the remote host is prior to 3.2.2 or 3.3.x prior to 3.9. It is, therefore,
affected by an insecure session management vulnerability due to not properly handling the login form. An authenticated,
remote attacker can exploit this to acquire the identity of an arbitrary user.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://web.archive.org/web/20090621002725/http://plone.org/products/plone/security/advisories/cve-2009-0662
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?6fbd7995");
  script_set_attribute(attribute:"see_also", value:"https://exchange.xforce.ibmcloud.com/vulnerabilities/50061");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Products.PlonePAS version 3.2.2, 3.9 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2009-0662");

  script_set_attribute(attribute:"vuln_publication_date", value:"2009/04/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2009/04/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/22");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:plone:products.plonepas");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("python_plone_detect.nbin");
  script_require_ports("Host/nix/Python/Packages/Enumerated", "Host/win/Python/Packages/Enumerated");

  exit(0);
}

include('python.inc');

var pkg = 'products.plonepas';
var cpe = 'cpe:/a:plone:products.plonepas';

var libs = python::get_package_info(pkg_name:pkg, cpe:cpe);
if (empty_or_null(libs))
  audit(AUDIT_NOT_INST, pkg);

vcf::check_all_backporting(app_info:libs);

var constraints = [
  {'fixed_version': '3.2.2'},
  {'min_version': '3.3', 'fixed_version': '3.9'}
];

vcf::check_version_and_report(app_info:libs, constraints:constraints, severity:SECURITY_WARNING);