CVE-2016-4042

2017-02-2420:59:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.6%

JSON

Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.

CPENameOperatorVersion
ploneeq5.0a2
ploneeq1.0.4
ploneeq3.0.4
ploneeq2.0.2
ploneeq3.0.6
ploneeq4.1.4
ploneeq4.1
ploneeq4.1a1
ploneeq4.3a2
ploneeq4.3b1

Name	Operator	Version
plone	eq	5.0a2
plone	eq	1.0.4
plone	eq	3.0.4
plone	eq	2.0.2
plone	eq	3.0.6
plone	eq	4.1.4
plone	eq	4.1
plone	eq	4.1a1
plone	eq	4.3a2
plone	eq	4.3b1

Rows per page:

1-10 of 781

References

www.openwall.com/lists/oss-security/2016/04/20/2

plone.org/security/hotfix/20160419/unauthorized-disclosure-of-site-content