Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011...

GHSA-2QX8-589J-GCPX Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts

plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011...

CVE-2011-1950

CVE-2011-1950 affects Plone with the plone.app.users component in Plone 4.0/4.1. The issue allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, with activity reportedly observed in the wild in June 2011. The connected documents confirm the prod...