50 matches found
CVE-2000-1211: Undefined Security Weakness
Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow attackers to perform unauthorized activities...
CVE-2000-0725
CVE-2000-0725 affects Zope prior to 2.2.1. The vulnerability arises in the getRoles method, where access is insufficiently restricted, allowing a user who can edit DTML to modify the roles list included in a request and thereby add or modify roles. The issue is described across multiple connected...
CVE-2000-0725: Undefined Security Weakness
Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request...
FreeBSD-SA-00:38.zope
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:38 Security Advisory FreeBSD, Inc. Topic: zope port allows remote modification of DTML documents Category: ports Module: zope Announced: 2000-08-14 Credits: Unknown...
[SECURITY] new version of zope released
Package: zope Vulnerability type: remote unprivileged access Debian-specific: no On versions of Zope prior to 2.2beta1 it was possible for a user with the ability to edit DTML can gain unauthorized access to extra roles during a request. Debian 2.1 slink did not include zope, and is not vulnerabl...
Zope < 2.1.7 DocumentTemplate Unauthorized DTML Entity Modification
The remote web server is Zope 2.1.7. There is a security problem in these versions that can allow the contents of DTMLDocuments or DTMLMethods to be changed without forcing proper user authentication. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10447; scriptversion...
CVE-2000-0062
The DTML implementation in the Z Object Publishing Environment Zope allows remote attackers to conduct unauthorized activities...
CVE-2000-0062
CVE-2000-0062 pertains to the DTML implementation in Zope, where remote attackers could perform unauthorized activities. Connected advisories (GHSA-WCWP-R3FJ-MM3P; OSV) describe this as an Improper Authentication issue in Zope DTML, aligning with the historical vulnerability where DTML access cou...
