Moderate severity vulnerability that affects Products.PlonePAS

2018-07-2319:50:29

Google

osv.dev

0.004 Low

EPSS

Percentile

72.0%

JSON

The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors.

CPENameOperatorVersion
products-plonepaseq3.8
products-plonepaseq3.3
products-plonepaseq3.4
products-plonepaseq3.0
products-plonepaseq3.7
products-plonepaseq3.1
products-plonepaseq3.6
products-plonepaseq3.2.1
products-plonepaseq3.2
products-plonepaseq3.5

Name	Operator	Version
products-plonepas	eq	3.8
products-plonepas	eq	3.3
products-plonepas	eq	3.4
products-plonepas	eq	3.0
products-plonepas	eq	3.7
products-plonepas	eq	3.1
products-plonepas	eq	3.6
products-plonepas	eq	3.2.1
products-plonepas	eq	3.2
products-plonepas	eq	3.5