Lucene search

[email protected]NVD:CVE-2011-2528

HistoryJul 19, 2011 - 8:55 p.m.

CVE-2011-2528

2011-07-1920:55:01

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Unspecified vulnerability in (1) Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and (2) PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a “highly serious vulnerability.” NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-0720.

Affected configurations

NVD

Node

ploneplone_hotfix_20110720

AND

ploneploneMatch3.0

ploneploneMatch3.0.1

ploneploneMatch3.0.2

ploneploneMatch3.0.3

ploneploneMatch3.0.4

ploneploneMatch3.0.5

ploneploneMatch3.0.6

ploneploneMatch3.1

ploneploneMatch3.1.1

ploneploneMatch3.1.2

ploneploneMatch3.1.3

ploneploneMatch3.1.4

ploneploneMatch3.1.5.1

ploneploneMatch3.1.6

ploneploneMatch3.1.7

ploneploneMatch3.2

ploneploneMatch3.2.1

ploneploneMatch3.2.2

ploneploneMatch3.2.3

ploneploneMatch3.3

ploneploneMatch3.3.1

ploneploneMatch3.3.2

ploneploneMatch3.3.3

ploneploneMatch3.3.4

ploneploneMatch3.3.5

ploneploneMatch3.3.6

Node

ploneploneMatch4.0

ploneploneMatch4.0.1

ploneploneMatch4.0.2

ploneploneMatch4.0.3

ploneploneMatch4.0.4

ploneploneMatch4.0.5

ploneploneMatch4.0.6.1

ploneploneMatch4.0.7

ploneploneMatch4.0.8

ploneploneMatch4.1

zopezopeMatch2.12.0

zopezopeMatch2.12.0a1

zopezopeMatch2.12.0a2

zopezopeMatch2.12.0a3

zopezopeMatch2.12.0a4

zopezopeMatch2.12.0b1

zopezopeMatch2.12.0b2

zopezopeMatch2.12.0b3

zopezopeMatch2.12.0b4

zopezopeMatch2.12.1

zopezopeMatch2.12.2

zopezopeMatch2.12.3

zopezopeMatch2.12.4

zopezopeMatch2.12.5

zopezopeMatch2.12.6

zopezopeMatch2.12.7

zopezopeMatch2.12.8

zopezopeMatch2.12.9

zopezopeMatch2.12.10

zopezopeMatch2.12.11

zopezopeMatch2.12.12

zopezopeMatch2.12.13

zopezopeMatch2.12.14

zopezopeMatch2.12.15

zopezopeMatch2.12.16

zopezopeMatch2.12.17

zopezopeMatch2.12.18

zopezopeMatch2.13.0

zopezopeMatch2.13.0a1

zopezopeMatch2.13.0a2

zopezopeMatch2.13.0a3

zopezopeMatch2.13.0a4

zopezopeMatch2.13.0b1

zopezopeMatch2.13.0c1

zopezopeMatch2.13.1

zopezopeMatch2.13.2

zopezopeMatch2.13.3

zopezopeMatch2.13.4

zopezopeMatch2.13.5

zopezopeMatch2.13.6

zopezopeMatch2.13.7

References

plone.org/products/plone-hotfix/releases/20110622

plone.org/products/plone/security/advisories/20110622

secunia.com/advisories/45056

secunia.com/advisories/45111

www.openwall.com/lists/oss-security/2011/07/04/6

www.openwall.com/lists/oss-security/2011/07/12/9

bugzilla.redhat.com/show_bug.cgi?id=718824

mail.zope.org/pipermail/zope-announce/2011-June/002260.html

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

JSON

Related for NVD:CVE-2011-2528

cve2 prion2 osv2 cvelist2 github2 nessus7 nvd1 openvas7 redhat2 centos1 oraclelinux1 freebsd1