CVE-2011-4030

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...

Design/Logic Flaw

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...

CVE-2011-4030

The CVE-2011-4030 issue affects Plone CMFEditions 2.x in Plone 4.0.x–4.0.9, 4.1, and 4.2–4.2a2, where KwAsAttributes classes can be published, allowing remote attackers to access sub-objects via unspecified vectors. Root cause: CMFEditions did not prevent KwAsAttributes from being publishable. Im...